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Chapter 1: Overview 



The theory of quantum mechanics, founded in the early 1920s, ended the turmoil 
caused by the classical physics that predicted various absurd results such as electrons 
spiraling inexorably into the atom nucleus. Though the mathematical framework of 
quantum mechanics is simple, even geniuses like Albert Einstein found it counter- 
intuitive. Generations of physicists since put a lot of effort to sharpen our intuition 
about quantum mechanics, and make it more transparent to normal human minds. 
Several fundamental results discovered later on, such as the famous no-cloning theorem 
[58] that denies the possibility of using quantum effects to signal faster than light, help 
us better understand quantum mechanics. 

Research on quantum mechanics evolved into a interdisciplinary science due to 
several successful applications of quantum effects on classical computation and com- 
munication problems in 1990s. Among them, Shor proposed a quantum algorithm for 
the enormously important problem [53] — the problem of finding the prime factors of 
an integer — showing exponential speed-up over the best known classical algorithm. 
This result not only attracted broad interest because this problem is believed to have 
no efficient solution on classical computers, but also provided strong evidence that 
quantum computers are more powerful than classical computers. 

However, the power of quantum computation and communication over classical 
computation and communication comes from implementing entangled quantum states 
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that are easily spoilt by their vulnerability to errors. Namely, the destructive inter- 
ference of the omnipresent environment leads to an exponential loss of the probability 
that the computation runs in the desired way. Up to that point, there was a widespread 
belief that decoherence — environmental noise — would doom any chance of building 
large scale quantum computers or quantum communication protocols. The equally 
widespread belief that any analogue of classical error correction was impossible in 
quantum mechanics due to the famous no cloning theorem produced an even stronger 
pessimistic atmosphere in developing quantum computers. 

Luckily, the pessimistic atmosphere did not last long. One of the most important 
discoveries in quantum information science, the existence of quantum error-correcting 
codes (QECCs), defied those expectations. The first quantum error-correcting code, 
considered as a quantum analogue of the classical repetition code, was proposed by 
Shor in 1995 [52]. The theory of quantum error correction quickly became a popular 
research topic. The quantum error-correcting conditions were proved independently 
by Bennett, DiVincenzo, Smolin and Wootters [5], and by Knill and Laflamme [34]. 
The best quantum code that encodes one-qubit information, the five-qubit code, was 
discovered by Laflamme, Miquel, Paz, and Zurek [39], and independently by [5]. 

The development of quantum error-correcting theory then became systematic. A 
construction of Calderbank, Shor, and Steane [16, 55] showed that it was possible to 
construct quantum codes from classical linear codes — the CSS codes — thereby draw- 
ing on the well-studied theory of classical error correction. Furthermore, Gottesman 
invented the stabilizer formalism [28], and used it to define stabilizer codes. In this 
view, quantum error-correcting codes are simultaneous eigenspaces of a group of com- 
muting operators, the stabilizer. Independently, Calderbank, Rain, Shor, and Sloane 
[14] proposed a similar idea to define quantum codes based on orthogonal geometry in 
classical coding theory. This result connected quantum codes to classical quaternary 
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codes [15]. The theory of quantum error correction developed so far is called standard 
quantum error correction. 

Important as these results were, they fell short of doing everything that one might 
wish. The connection between classical codes and quantum codes was not universal. 
Rather, only classical codes which satisfied a self- orthogonality constraint could be 
used to construct quantum codes. While this constraint was not too difficult to satisfy 
for relatively small codes, it is a substantial barrier to the use of highly efficient modern 
codes, such as Turbo and Low-Density Parity Check (LDPC) codes, in quantum in- 
formation theory. These codes are capable of achieving the classical capacity; but the 
difficulty of constructing self-orthogonal versions of them has made progress toward 
finding quantum versions very slow. 

These problems can be overcome with pre-existing entanglement. Entanglement 
plays a central role in almost every quantum computation and communication task. 
It enables the teleportation of quantum states without physically sending quantum 
systems [4]; it doubles the capacity of quantum channels for sending classical information [6]; 
it is known to be necessary for the power of quantum computation [8, 31]. Furthermore, 
descriptions in quantum information theory are often simplified by the assumption that 
pre-existing entanglement is available. 

In the thesis, we show how shared entanglement provides a simpler and more fun- 
damental theory of quantum error correction, and at the same time greatly generalize 
the existing theory of quantum error correction. If the CSS construction for quantum 
codes is applied to a classical code which is not self-orthogonal, the resulting "stabi- 
lizer" group is not commuting, and thus has no code space. We are able to avoid this 
problem by making use of pre-existing entanglement. This noncommuting stabilizer 
group can be embedded in a larger space, which makes the group commute, and allows 
a code space to be defined. Moreover, this construction can be applied to any classical 
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quaternary code, not just self-orthogonal ones. The existing theory of quantum error- 
correcting codes thus becomes a special case of our theory: self-orthogonal classical 
codes give rise to standard quantum codes, while non-self-orthogonal classical codes 
give rise to entanglement-assisted codes. 

Besides the entanglement-assisted formalism [13, 12] we proposed in this thesis, 
there has been one other major breakthrough in quantum error correction theory: 
the discovery of operator quantum error-correcting codes (OQECCs) [1, 2, 3, 33, 37, 
38, 48, 50], or subsystem codes. Instead of encoding quantum information into a 
subspace, OQECCs encode quantum information into a subsystem of the subspace. 
These provide a general theory which combines passive error-avoiding schemes, such 
as decoherence-free subspaces [61, 40] and noiseless subsystems [35, 32, 59, 60], with 
conventional (active) quantum error correction. OQECCs do not lead to new codes, but 
instead provide a new kind of decoding procedure: it is not necessary to actively correct 
all errors, but rather only to perform correction modulo the subsystem structure. One 
potential benefit of the new decoding procedure is to improve the threshold of fault- 
tolerant quantum computation [2]. 

The other major contribution of this thesis is the development of the unifying 
formalism that unifies these two extensions of standard QECCs: the operator quan- 
tum error-correcting codes (OQECCs), and the entanglement-assisted quantum error- 
correcting codes (EAQECCs). Furthermore, our formalism retains the advantages 
of both entanglement-assisted and operator quantum error correction. On one hand, 
OQECCs provide a general theory which combines passive error-avoiding schemes with 
standard quantum error correction. On the other hand, EAQECCs provide a general 
theory which links any classical quaternary code, not just self-orthogonal ones, to a 
quantum code. In addition to presenting our formal theory, we have given several 
examples of code construction. These examples demonstrate that our formalism can 
be used to construct quantum codes tailored to the needs of particular applications. 
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Because classical LDPC codes have such high performance — approaching the 
channel capacity in the limit of large block size — there has been considerable interest 
in finding quantum versions of these codes. However, quantum low-density parity- 
check codes [30, 44, 17, 20] are far less studied than their classical counterparts. The 
main obstacle comes from the dual- containing constraint of the classical codes that 
are used to construct the corresponding quantum codes. The second obstacle comes 
from the bad performance of the iterative decoding algorithm such as the famous sum- 
product algorithm (SPA). Though the SPA decoding can be directly used to decode 
the quantum errors, its performance is severely limited by the many 4-cycles, which 
are usually the by-product of the dual-containing property, in the standard quantum 
LDPC codes [44]. 

In the last part of the thesis, we will show that, with the entanglement-assisted 
formalism [13, 12], these two obstacles of standard quantum LDPC codes can be over- 
come. By allowing the use of pre-shared entanglement between senders and receivers, 
the dual-containing constraint can be removed. Constructing quantum LDPC codes 
from classical LDPC codes becomes transparent. That is, arbitrary classical quater- 
nary codes can be used to construct quantum codes via the generalized CSS construc- 
tion [13]. Furthermore, we can easily construct quantum LDPC codes from classical 
LDPC codes with girth at least 6. Wc make use of classical quasi-cyclic LDPC codes 
in our construction, and show that given similar net yield these quantum LDPC codes 
perform better than the standard quantum LDPC codes by numerical simulation. 

This thesis is organized as follows. We give various background materials in chapter 
2. In chapter 3, we introduce standard QECCs using the canonical code method and 
stabilizer formalism. In chapter 4, we present our first result: the entanglement-assisted 
formalism. In chapter 5, we introduce operator quantum error-correcting codes. In 
chapter 6, we present our second result: the entanglement-assisted operator formalism. 
Finally, we show how to use the entanglement-assisted formalism to construct quantum 
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LDPC codes with better performance in chapter 7. Notice that wc expUcitly assume a 
communication scenario throughout the thesis. That is, noise is modeled as a quantum 
channel, and it only happens in the channel. Two parties involved in the information 
processing are called sender and receiver, respectively, and their operations on the 
quantum states are assumed to be noise-free. 
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Chapter 2: Background knowledge 



2.1 Single qubit Pauli group 

The set of Pauli matrices over a two-dimensional Hilbert space H2 is defined as 
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The Pauli matrices are Hermitian unitary matrices with eigenvalues belonging to the 
set {1, —1}. The multiplication table of these matrices is given by: 
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iZ 


-iY 
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-iZ 
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iX 
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Z 


iY 


-iX 


I 



Observe that the Pauli matrices either commute or anticommute. Let [S] = {f3S \ /3 G 

C, = 1} be the equivalence class of matrices equal to 5 up to a phase factor.* Let 

Q be the group generated by the set of Pauli matrices {/, X, y, Z} with all possible 
*It makes good physical sense to neglect this overall phase, which has no observable consequence. 
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phases, then the set [Q] = {[I],[X],\Y],[Z]} is readily seen to form a eommutative 
group under the multiphcation operation defined by [S][T] = [ST]. We called [Q] the 
Pauli group. 

We are interested in relating the Pauli group to the additive group (Z2)2 = {00,01,10,11} 
of binary words of length 2 described by the table: 
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00 


01 


11 


10 


00 


00 


01 


11 


10 


01 


01 


00 


10 


11 


11 


11 


10 


00 


01 


10 


10 


11 


01 


00 



This group is also a two-dimensional vector space over the field Z2. A bilinear form 
can be defined over this vector space, called the symplectic form or symplectic product^ 
: (Za)^ X (Za)^ ^ Z2, given by the table 
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01 


11 


10 


00 














01 
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11 





1 





1 


10 





1 


1 






In what follows we will often write elements of (Za)^ as u = {z\x), with z,x & Z2. For 
instance, 01 becomes (0|1). For u = {z\x),v = {z'\x') G (Za)^ the symplectic product 
is equivalently defined by 

uQ V = zx' + z'x. 
^Strictly speaking it is not an inner product. 
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Define the map N : (Z2f ^ a by the foUowing table: 





g 


00 


I 


01 


X 


11 


Y 


10 


z 



This map is defined in such a way that A^(2|a;) and Z^X^ are equal up to a phase factor, 
i.e. 

[iV(,|,)] = [Z^X% 

We make two key observations 

(1) . The map [N] : (^2)^ — [Q] induced by N is an isomorphism: 

(2) . The commutation relations of the Pauli matrices are captured by the symplectic 

product 

NuN^ = (-l)«®"iV^Ar„. 
Both properties are readily verified from the tables. 

2.2 Multi-qubit Pauli group 

Consider an n-qubit system corresponding to the tensor product Hilbert space Hf"'. 
Define an n-qubit Pauli matrix S to be of the form S = -Si (g) ^2 (8) • • • <8) S^, where 
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Sj £ Q. Let be the group of all 4" n-qubit Pauli matrices with all possible phases. 
Define as before the equivalence class [S] = {/3S | /3 G C, = 1}. Then 



Thus the set [Q^] = {[S] : S G Q'^} is a commutative multiplicative group, and is called 
the n-fold Pauli Group. 

Now consider the group/vector space (22)^" of binary vectors of length 2n. Its 
elements may be written as u = (z|x), z = zi . . . Zn & (^2)", x = xi . . . a^n G (^2)". 
We shall think of u, z and x as row vectors. The symplectic product of u = (z|x) and 
V = (z'|x') is given by 



The right hand side are binary inner products and the superscript T denotes the 
transpose. This should be thought of as a kind of matrix multiplication of a row 
vector and a column vector. We use u v"^ rather than the more standard uv"^ 
to emphasize that the symplectic form is used rather than the binary inner product. 
Equivalently, 



where Ui = {zi\xi),Vi = {z'^\x[) and this sum represents Boolean addition. Observe 
that if u = 0, these two vectors are "orthogonal" to each other with respect to 
the symplectic inner product. 

The map : (22)^" a" is now defined as 



[S][T] = [SiTi] ® [S2T2] ® • • • ® [SnTn] = [ST]. 



u0 = zx'^ + z'x^. 




iVu = iV„i • • • iV, 



Writing 



X'^ = X^i 0---0X^", 
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as in the single qubit case, we have 



The two observations made for the single qubit case also hold: 



(1) 



The map [A'^] : (^2)^" — > [Q^] induced by is an isomorphism: 



[iVu][iVv] = K+v]. 



(1) 



Consequently, if {ui, . . . , u^} is a linearly independent set then the elements of 
the Pauli group subset {[A^ui]) ■ ■ ■ ) [-^u^]} are independent in the sense that no 
element can be written as a product of others. 

(2). The commutation relations of the n-qubit Pauli matrices are captured by the 
symplectic product 



We define the weight of a Pauli operator N-a, wt{N-a), to be the number of single- 
qubit Pauli matrices in not equal to the identity /. Define the weight of a vector 
u = (z|x) G (^2)^"' by wtsp(u) = wt2(z V x). Here V denotes the bitwise logical "or", 
and wt2(y) is the number of non-zero bits in y G (Z2)". It is easy to verify that 



(2) 



wt(A^u) = wtsp(u). 
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2.3 Properties of the symplectic form 

A subspace V of (^2)^" is called symplectic [18] if there is no v G F such that 

v0u^ = O, VugV. (3) 

{7,2)^^ is itself a symplectic subspace. Consider the standard basis for {^2)^"', consisting 
of gi = (ej|0) and hj = (0|ej) for z = 1, . . . , n, where = (0, . . . , 0, 1, 0, . . . , 0) [1 in 
the ith position] are the standard basis vectors of (Z2)". Observe that 

gi0gJ = O, foralH,i (4) 

hj0hJ = O, foralli,j (5) 

giQhJ = 0, foralliT^i (6) 

gi hf = 1, for all i. (7) 

Thus, the basis vectors come in n hyperbolic pairs (gj, hj) such that only the symplectic 
product between hyperbolic partners is nonzero. The matrix J = [gj hj] defining 
the symplectic product with respect to this basis is given by 



J 



^0 / ^ 

"nxn -'nxn 



V 



(8) 



where Inxn and O^xn are the nxn identity and zero matrices, respectively. A basis for 
(Z2)^" whose symplectic product matrix J is given by (8) is called a symplectic basis. 
In the Pauli picture, the hyperbolic pairs (gi,hj) correspond to (Z^^X^^), and are 
sometimes expressed as {Zi,Xi), - the anticommuting Z and X Pauli matrices acting 
on the ith qubit. 
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In contrast, a subspace V of (^2)^" is called isotropic if (3) holds for all v G y. The 
largest isotropic subspace of (^2)^" is n-dimensional. The span of the gj, z = 1, . . . , n, 
is an example of a subspace saturating this bound. 

A general subspace of (^2)^" is neither symplcctic nor isotropic. The following 
theorem, stated in [18] and rediscovered in Pauli language in [24], says that an arbitrary 
subspace V can be decomposed as a direct sum of a symplectic part and an isotropic 
part. Here, we prove this theorem constructively, using a version of the Gram-Schmidt 
procedure. 

Theorem 1. Let V be an m- dimensional subspace of {^2)^'^ . Then there exists a 
symplectic basis 0/(^2)^"" consisting of hyperbolic pairs (uj, Vj), i = 1, . . . ,n, such that 
{ui, . . . , Uc+i, Vi, . . . , Vc} is a basis for V, for some c,i>0 with 2c + £ = m. 
Equivalently, 

V = symp(F) © iso(y) 

where symp(y) = span{ui, . . . , Uc, Vi, . . . , Vc} is symplectic and iso(y) = span{uc+i, . . . , Uc+^} 

is isotropic. 

Proof. Pick an arbitrary basis {wi , . . . , w^} for V and extend it to a basis {wi, . . . , W2n} 
for (^2)^". The procedure consists of n rounds. In each round a new hyperbolic pair 
(ui,Vi) is generated; the index i is added to the set U (respectively, V) if G F 

(vi e V). 

Initially set i = 1, m' = m, and = V = 0. The ith round reads as follows. 
(1). We start with vectors wi, . . . , W2(„_i+i) , and Ui, . . . u^-i, Vi, . . . Vj-i, such that 

(a) wi,... ,W2(„_i+i), ui,...Ui_i,vi,...Vi_i is a basis for (Z2)^", 

(b) each of ui, . . . Uj-i, vi, . . . Vj_i has vanishing symplectic product with each 

of Wi,...,W2(„_i+i), 

(c) V = spanjwj : I < j < m'} © spanjuj : j eU} (B span{vj : j G V}. 
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These conditions arc satisfied for i = 1 where we begin with vectors wi, . . . , W2n- 
In this case, we implicitly assume that (uq, vq) is the empty set. 

Define Uj = wi. If m' > 1 then and add i to U. Let j > 2 be the smallest index 
for which wi wj = 1. Such a j exists because of (a), (b) and the fact that 
there exists a w G (^2)^" such that Uj w-^ = 1. 

Set Vj = Wj. 

If j < m': 

This means that there is a hyperbolic partner of Uj in F. Add i to V; swap Wj 
with W2; for A; = 3, ... , 2(n — i + perform 

:= Wfe - (vi w^)uj - (Ui w^)vi, 

so that 

wUQuf = wU0vf = 0; (9) 

set m! := m' — 2. 

If j > m': 

This means that there is no hyperbolic partner of Uj in V. Swap Wj with 
W2(„_i_|_i); for A; = 2, ... , 2(n — i) + 1 perform 

Wfe_i := Wjk - (vi wl)ui - {Ui 

so that 

w;^_i0uf = w'fc_i0vf = 0; (10) 
if m' > 1 then set m' := m! — 1. 
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(4). Let Wfc := for 1 < A: < 2(n — i). We need to show that the conditions 
from item 1 are satisfied for the next round {i := i + 1). Condition (a) holds 
because {uj, Vj, w'^ , . . . W2^^_^)} are related to the old {wi, . . . W2(„_i+i)} by an 
invertible linear transformation. Condition (b) follows from (9) and (10). Re- 
garding condition (c), if m' = then it holds because U and V did not change 
from the previous round. Otherwise, consider the two cases in item 3. If j < m' 
then {ui, Vj, w'^, . . . w^,_2} are related to the old {wi, . . .Wjn'} by an invert- 
ible linear transformation. If j > m' then {uj, w^, . . . w^,_^} are related to the 
old {wi, . . . w^'} by an invertible linear transformation (the (u^ w^)vi terms 
vanish for 1 < < m' because there is no hyperbolic partner of Uj in V). 

At the end of the ith round, < m' < 2(n — i). Thus m' = after n rounds and hence 
V = span{uj : j eU}® span{vj : j G V}. The theorem follows by suitably reordering 
the (uj,Vj). 

□ 

Remark It is readily seen that the space iso(y) is unique, given V. In contrast, 
symp(F) is not. For instance, replacing vi by v'^ = Vi -|- Uc+i in the above definition 
of symp(F) does not change its symplectic property. 

A symplectomorphism T : (^2)^" — ^ (^2)^" is a linear isomorphism which preserves 
the symplectic form, namely 

T(u)0T(v)^ = u©v^. (11) 

The following theorem relates symplectomorphisms on (^2)^" to unitary maps on T^f 

It appears, for instance, in [11]. For completeness, we give an independent proof here. 
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Theorem 2. For any symplectomorphism T on (^2)^" there exists a unitary map Ux 
on such that for all u G (Za)^", 

[A^T(u)] = [UrNJj:^\ 

Remark. The unitary map Uy may be viewed as a map on given by [S] 1— >■ 
\UrSUy^]. The theorem says that the following diagram commutes 

(Z2)2n iZ^fn 



[JV] 



[JV] 



[Qn\ ' [^n] 

Proof. Consider the standard basis gj = (ei|0), hj = (0|ei). Define the unique (up to a 
phase factor) state |0) on Hf^ to be the simultaneous +1 eigenstate of the commuting 
operators Ng. , j = 1, . . . ,n. Define an orthonormal basis {|b) : b = 61 . . . 6„ G (^2)"} 
for Hf' by 

|b)=A^E.;'.hJO). 

The orthonormality follows from the observation that |b) is a simultaneous eigenstate 
of , j = 1, . . . ,n with respective eigenvalues (— l)''^ : 

Ng^\h) = Ng^Nj:^,^^JO) 

= (-l)''^'^E.^.h,iV,JO) ^^^^ 



The second line is an application of (2). 
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Define gj := T(gj). Wc repeat the above construction for this new basis. Define 
the unique (up to a phase factor) state |6) to be the simultaneous +1 eigenstate of the 
commuting operators Ng., i = 1, . . . ,n. Define an orthonormal basis {|b)} by 



|b) = N. 



10) 



(13) 



(14) 



Defining u = Zigi + Xjhj, u = Zigi + Xjhj and x = xi . . . x„, we have 
iVa|b) = AraAr^^,^j^j6) 

.]_)u0(Ef feih,)^gie(u) jg'^p^j^ 
= (_l)u0{E.fih,Fg^e(a)|gq:^^^ 

where 0(u) is a phase factor which is independent of b. The first equahty follows from 
(13), the second from (2), the third from (1), the fourth from the definition of |0) and 
the fact that X^X"" = the fifth from (13), and the sixth from (11). Similarly 



Ar„|b) = (-l)"®(^'''*^*)^e^'^(")|b + x), 



(15) 



where ip{u) is a is a phase factor which is independent of b. 
Define Uj; by the change of basis 



Ur = ^\h){h\. 
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Combining (14) and (15) gives for all |b) 

Nr(u)Ur\h) = (-l)"®(^'''''^')^e*^(")f/T|b + x) 

(16) 

Therefore [A^t(u)] = [UrN^U^^]. 

□ 

2.4 Symplectic codes 

An [n, k] symplectic code Cgp defined by an (n — k) x 2n parity check matrix Hgp is 
given by 

Cgp = rowspace(i^sp)"'" 

where 

y-L = {w : w = 0, Vu G V}. 

The subscript sp emphasizes that the code is defined with respect to the symplectic 
product. Note that {V-^)-^ = V . We say that Cgp is dual- containing if 

(Csp)"^ = rowspace(i7sp) C Cgp; (17) 

this is true if iJgp is self-orthogonal under the symplectic product. For simplicity, the 
term "self-orthogonal code" is often referred to a code with a self-orthogonal parity- 
check matrix. 

The notion of distance provides a convenient way to characterize the error-correcting 
properties of a code. An [n, k\ symplectic code Cgp with a parity check matrix H^p is 
said to have distance d if for each nonzero u of weight < d, u Cgp, or equivalently, 
i?gp 7^ 0^. 
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2.5 Classical quaternary codes 

Following the presentation of Forney et al. [25], the addition table of the additive 
group of the quaternary field F4 = {0, 1,lj,lJ} is given by 



+ 





UJ 


1 


UJ 








UJ 


1 


UJ 


uJ 


UJ 





UJ 


1 


1 


1 


UJ 





UJ 


UJ 


UJ 


1 


UJ 






Comparing the above to the addition table of (^2)^ establishes the isomorphism 7 : 
F4 {Z2f, given by the table 



F4 







00 


iJ 


01 


1 


11 


u 


10 



The multiplication table for F4 is defined as 



X 





UJ 


1 


UJ 

















UJ 





UJ 


UJ 


1 


1 





UJ 


1 


UJ 


UJ 





1 


u 


UJ 



Define the traces (Tr) of the elements {0, 1,uj,uj} of F4 as {0, 0, 1, 1}, and their conju- 
gates ("^") as {0, l,a7,a;}. Intuitively, Tra measures the "w-ness" of a G F4. Observe 
that a = if and only if both Trwa = and TrcZJa = 0. The Hermitian inner product 
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of two elements a,b £ ¥4 is defined as (a, b) = a^b G F4. The trace product is defined 
as Tr(a, b) G F2. The trace product table is readily found to be 








UJ 


1 


UJ 

















UJ 








f 


f 


1 





1 





1 


CO 





1 


1 






Comparing the above to the table of (^2)^ establishes the identity 

Tr(a,6) =7(0)07(6). 

These notions can be generalized to n-dimensional vector spaces over F4. Thus, for 
a,bG (F4)", 

TV(a,b) =7(a)0 7(b)^, (18) 

where the Hermitian inner product over (F4)" is defined by the componentwise sum 
(a, b) = J2i '^^b. Let wt4(a) be the number of non-zero bits in a G (F4)"', then we have 
another identity 

wtsp(7(a)) =wt4(a), (19) 

where 7(a) G (^2)^". 

An [n, k] code C4 (the subscript 4 emphasizes that the code is over F4) with the 

parity check matrix H4 is said to have distance d if for each vector a G (F4)" with 
wt4(a) < d, a C4, or equivalently, (i?4,a) 7^ 0-^. 

Proposition 1. Given an [n,k,d] code C4 with parity check matrix H4, there exists a 
corresponding [n, 2k — n, d] symplectic code Cgp- 
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Proof. Consider a classical [n, k, d]^ code with an (n — /c) x n quaternary parity check 
matrix H4. By definition, for each nonzero a G (F4)" such that wt4(a) < d, 

This is equivalent to the logical statement 

Tr(wil4,a) 7^ 0^ V Tr(c[;i?4,a) / 0^. 
This is further equivalent to 

TV(i^4,a) /O'^, 

where 



H 



^ UJH4 ^ 
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y Wi^4 J 

Define the {2n — 2k) x 2n symplectic matrix Hgp = ^{Hi). By the correspondences 
(18) and (19), 

i/sp 7^ 0^, 

holds for each nonzero u G (^2)^" with wt(u) < d. Thus Cgp is an [n,2k — n, d] 
symplectic code defined by iJgp- D 

2.6 Encoding classical information into quantum states 

In this section we review two schemes for sending classical information over quantum 
channels: elementary coding and superdense coding. These will be used later in the 
context of quantum error correction to convey information to the decoder about which 
error happened. 
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2.6.1 Elementary coding 

In the first scheme, AUce and Bob are connected by a perfect qubit channel. Alice can 

send an arbitrary bit a G Z2 over the qubit channel in the following way: 

• Alice locally prepares a state |0) in 7^2- This state is the +1 eigenstate of the 
Z operator. Based on her message a, she performs the encoding operation X°' ^ 
producing the state |a) = X"|0). 

• Alice sends the encoded state to Bob through the qubit channel. 

• Bob decodes by performing the von Neumann measurement in the {|0), |1)} basis. 
As this is the unique eigenbasis of the Z operator, this is equivalently called 
"measuring the Z observable" . 

We call this protocol "elementary coding" and write it symbolically as a resource 
inequality [22, 21, 23] * 

[g^ 9] > [c^ c]. 

Here \q q] represents a perfect qubit channel and [c c] represents a perfect classical 
bit channel. The inequality > signifies that the resource on the left hand side can be 
used in a protocol to simulate the resource on the right hand side. 

Elementary coding immediately extends to m qubits. Alice prepares the simul- 
taneous +1 eigenstate of the Z^^,...,Z^"' operators |0), and encodes the message 
a G (Z2)™ by applying X^, producing the encoded state |a) = X'^jO). Bob decodes 
by simultaneously measuring the Z'^^ , . . . , observables. We could symbolically 
represent this protocol by 

m[q q] > m[c ^ c]. 
*In [21] resource inequalities were used in the asymptotic sense. Here they refer to finite protocols, 
and are thus slightly abusing their original intent. 
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2.6.2 Superdense coding 

In the second scheme, Ahce and Bob share the ebit state 

|$) = i=(|0)C5|0) + |l)C5|l)) (21) 

in addition to being connected by the qubit channel. In (21) Alice's state is to the left 
and Bob's is to the right of the (g) symbol. 

The state |$) is the simultaneous (+1,+1) eigenstate of the commuting operators 
Z ® Z and X ® X. Again, the operator to the left of the symbol acts on Alice's 
system and the operator to the right of the (g) symbol acts on Bob's system. Alice can 
send a two-bit message (01,02) G (^2)^ to Bob using "superdense coding" [6]: 

• Based on her message (oi, 02), Alice performs the encoding operation Z°-'^X°-'^ on 
her part of the state |$), producing the state |ai,a2) = {Z°-^X"''^ ® 

• Alice sends her part of the encoded state to Bob through the perfect qubit chan- 
nel. 

• Bob decodes by performing the von Neumann measurement in the {{Z"-^X°''^ (g) 
/)|<I>) : (01,02) G (^2)^} basis, i.e., by simultaneously measuring the Z iS) Z and 
X (g) X observables. 

The protocol is represented by the resource inequality 

[q^q] + [qq]>2[c^c], (22) 

where [qq] now represents the shared ebit. It can also be extended to m copies. 
Alice and Bob share the state \^)^"^ which is the simultaneous -|-1 eigenstate of the 
Z^i (g) Z'^i , . . . , Z""" (g) Z'^'" and X""^ ^X^^i , . . . , X*"™ (gjX''™ operators. Alice encodes the 
message (ai, 32) G (22)^"* by applying Z^^X^'^, producing the encoded state |ai, 32) = 
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{Z^^X^'^ (g) Bob decodes by simultaneously measuring the Z^^ (g) Z^^,. . . , Z'^"' (g) 

Z^"^ and X*^! (gX^^i , . . . , X^"* (gX^*" observables. The corresponding resource inequality 
is 

m[q ^ q]+ m[qq] > 2m [c ^ c] . 

Superdense coding provides the simplest illustration of how entanglement can increase 
the power of information processing. 

2.7 Useful lemmas 

Lemma 1. Let V be an arbitrary subgroup of Qn with size 2"^. Then there exists a set 
of generators {Zi, ■ ■ ■ , Zpj^g, Xp+i, • • • , Xp+g} that generates V such that the Z 's and 
X 's obey the same commutation relations as in (23), for some p,q >0 andp+2q = m. 

[Zi,Zj] = yi,j 
[Xi,Xj]=0 

(23) 

[Xi,Zj] = ^i^j 
{Xi,Zi} = Vz. 

Proof. Though the proof can be found in [24]; however, a new proof can be easily 
obtained by combining Theorem 1 and the isomorphic map [N] : (^2)^" — [Qn]- □ 

The following lemma is a simply result from group theory, and a new proof can be 
obtained from Theorem 2 and [N] : (Zs)^" [Gn]- 

Lemma 2. // there is a one-to-one map between V and S which preserves their com- 
mutation relations, which we denote V ^ S, then there exists a unitary U such that 
for each Vi G V, there is a corresponding Si G S such that Vi = USiU~^ , up to a phase 
which can differ for each generator. 



24 



Lemma 3. // Cq is a simultaneous eigenspace of Pauli operators from the set S'q, 
then C = U-^{Co) is a simultaneous eigenspace of Pauli operators from the set S = 
{U-^AU : A G S'o}. 

Proof. Observe that if 

A|V)=a|V), 

then 

□ 

Lemma 4. Performing U followed by measuring the operator A is equivalent to mea- 
suring the operator U~^AU followed by performing U . 

Proof. Let Ilj be a projector onto the eigenspace corresponding to eigenvalue Aj of A. 
Performing U followed by measuring the operator A is equivalent to the instrument 
(generalized measurement) given by the set of operators {Iljf/}. The operator U~^AU 
has the same eigenvalues as A, and the projector onto the eigenspace corresponding 
to eigenvalue Aj is U'^XliU. Measuring the operator V^AU followed by performing 
U is equivalent to the instrument {U{U~^'n.iU)} = {U-iU}. □ 
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Chapter 3: Standard quantum error-correcting codes 



3.1 Discretization of errors 

It is well known that for standard quantum error correction (i.e., that unassisted by 
entanglement) it suffices to consider errors from the Pauli group (see e.g. [47].) We 
will review this result here. 

Denote by L the space of linear operators defined on the qubit Hilbert space 7^2- In 
general, a noisy channel is defined by a completely positive, trace preserving (CPTP) 
map M : — > L®"^ taking n-qubit density operators on Alice's system to density 
operators on Bob's system. We will often encounter isometric operators U : Hf^^ 
TYf The corresponding superoperator, or CPTP map, is marked by a hat U : C®^'^ 
C®""^ and defined by 

U{p) = UpU^. 

Observe that tf is independent of any phases factors multiplying U . Thus, for a Pauli 
operator AT^, only depends on the equivalence class [N-a\. 

Our communication scenario involves two spatially separated parties, Alice and 
Bob, connected by a noise channel N. Alice wishes to send k qubits perfectly to Bob 
through M. An [[n, k]] QECC consists of 

• An encoding isometry £ = C/enc '■ ^^'^ 

• A decoding CPTP map V : ^ C®'' 
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such that 

PoA^o^7enc = id®^ 

where id : £ — > £ is the identity map on a single qubit. 

To make contact with classical error correction it is necessary to discretize the 
errors introduced by M. This is done in two steps. First, the CPTP map M may be 
(non-uniquely) written in terms of its Kraus representation 

i 

Second, each Ai may be expanded in the Pauli operators 

Ai= ^ ai^uNu- 

ue(Z2)2" 

Define the support of J\f by supp(A/') = {u G (^2)^" : 3z, cnj^u 7^ 0}- The following 
theorem allows us to replace the continuous map J\f by the error set S = supp(Ar). 

Theorem 3. IfVoN^o U^^^ = id®*^ for all u e supp(A^), then VoMo (jenc = id®''. 

Proof. Wc may extend the map T> to its Stinespring dilation [56] - an isometric map 
JJ^ec with a larger target Hilbert space L®"^ ® such that 

If for all u G supp(AA) and all pure states |V') in H®^, the following equation holds 
for some pure state |u)(u| on then by linearity, we have 
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with the unnormalized state \i) = X^u'^i>u|u). Furthermore, 




i 



dec 



(24) 



where the second subsystem corresponds to 



jC'. Tracing out the latter gives 



concluding the proof. 



□ 



3.2 Canonical codes 

We first introduce the simplest form of standard quantum error-correcting codes (QECCs), 
the canonical codes. The canonical code Cq is defined by the following trivial encoding 
operation Sq = Uq, where 



In other words, the register containing |0) (of size s = n — k qubits) is appended to the 
registers containing \ip) (of size k qubits). We call the encoded state in (25) a codeword 
of Cq. What errors can this canonical code Cq correct with such a simple-minded 
encoding? 

Proposition 2. The encoding given by So and a suitably- defined decoding map Vq can 
correct the error set 



Uo:\v)^\Q)W). 



(25) 



Eo = {X^Z^ ® x°^(a)_^/3{a) . a, b G (Zs)^} 



(26) 



for any fixed functions a, f5 : (Z2)* — > (^2)^^- 
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Decoding 



\<p) 



Figure 1: A canonical quantum error-correcting code. 



Proof. The protocol is shown in Figure 1. After applying an error £^ G Eq, the channel 
output becomes (up to a phase factor): 



E{\0) ® Iv^)) = (X^Z'')|0) ® = |a) (8) W) 



(27) 



where |a) = X^|0), and |^') = (X'^(^)Z^(^))|(^). 

As the vector (a, b) completely specifies the error operator E, it is called the error 
syndrome. However, in order to correct this error, only the reduced syndrome, a, 
matters. In effect, a has been encoded using elementary coding (see section 2.6.1), and 
the receiver Bob can identify the reduced syndrome by simultaneously measuring the 
Z*'!, • • • ,Z^' observables. He then performs X~'^^^^ Z~^^^^ on the remaining fe-qubit 
system |(^'), returning it to the original state \ip). 

Since the goal is the transmission of quantum information, no actual measurement 
is necessary. Instead, Bob can perform the CPTP decoding operation Pq consisting of 
the controlled unitary 



■/3(a) 



(28) 



which is constructed based on the reduced syndrome, and is also known as collective 
measurement, followed by discarding the unwanted systems. □ 
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Wc can rephrase the above error-correcting procedure in terms of the stabihzer 
formaUsm. Let Sq = {Zi, • • • , Zg) be an AbeUan group of size 2*. Group Sq is called 
the stabilizer for Co, since every element of Sq fixes the codewords of Cq. Notice that 
we have used Zi to represent Z^^ here for simplicity. 

Proposition 3. The QECC Cq defined by Sq can correct an error set Eq if for all 

Ei,E2 G Eq, E^Ei G So[J{Qn — Z(So)), where Z{S) is the normalizer of group S. 

Proof. Since the vector (a, b) completely specifies the error operator E, we consider 
the following two different cases: 

• If two error operators Ei and E2 have the same reduced syndrome a, then the 

error operator E^Ei gives us the all-zero reduced syndrome. Therefore, E2E1 G 
Sq. This error E^Ei has no effect on the codeword. 

• If two error operators Ei and E2 have different reduced syndromes, and let a 
be the reduced syndrome of E^Ei, then E^Ei Z{So). This error E^Ei can be 
corrected by the decoding operation given in (28). 

□ 

3.3 The general case 

Theorem 4. Given an Abelian group Si of size 2^~^ that does not contain —I, there 
exists an [[n, fe]] quantum error- correcting code C defined by the encoding and decoding 
pair (StV) with the following properties: 

(1) . The code C can correct the error set E if for all Ei,E2 G E, E^Ei G Sj[j{Qn — 

Z{S:)). 

(2) . The codespace C is a simultaneous eigenspace of the Sj. 
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Encoding £ Error Set E = UEoU ' Decoding ^ 



|o>' 



u 











u 



Figure 2: A standard quantum error-correcting code. 

(3). To decode, the reduced error syndrome is obtained by simultaneously measuring 
the observables from Si. 

Proof. The protocol is shown in Figure 2. Since Sj has the same commutation relations 
with the stabilizer Sq of the canonical code Cq given in the previous section, by Lemma 
2, there exists an unitary matrix U such that <So = USjU~^. Define £ = o£q and 

V = Vq oU, where Sq and Vq are given in (25) and (28), respectively. 

(1). Let Eq be the error set that can be corrected by Cq. Then by Proposition 2, 



T>Q o Eqo £q = ii 



for any Eq G Eq. Let E = {JJ-^EqU : ^Eq G Eq}. It follows that, for any E eE, 



VoEoS = y 



Thus, the encoding and decoding pair (£, V) corrects E. Following Proposition 3, 
the correctable error set E contains all -Ei, £'2 such that E^Ei G Sj U(^n— -2(5/). 

(2) . Since Cq is the simultaneous +1 eigenspace of Sq, and 5/ = U~^SqU , Lemma 3 

guarantees that the codespace C after encoding f is a simultaneous eigenspace 
of 5/. 

(3) . The decoding operation Vq involves 
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i. measuring the set of generators of Sq, yielding the error syndrome according 
to the error Eq. 

ii. performing a recovering operation Eq again to undo the error. 

By Lemma 4, performing = ° is equivalent to measuring Sj = U^^SqU, 
followed by performing the recovering operation U'^EqU , followed by U to undo 
the encoding. 

□ 

We said an [[n, k]] QECC defined by Sj to have distance d, if for all operators Ei 
and E2 with weigh < d and Ei ^ E2, either 

i. ElEi^Qn-ZiSi), or 

ii. eIEi e Si. 

The code is called non-degenerate if the second condition is not invoked. A QECC 
with distance d can correct up to t-qubit errors, where t = [{d — l)/2j. Such code is 
called an [[n, k, d]] QECC. 

3.4 Relation to symplectic codes 

Proposition 4. Consider an [n,k,d] symplectic code Cgp defined by Hgp. If Cgp is 

dual- containing, then Cgp defines a non- degenerate [[n, k, d]] QECC. 

Proof. Since iJgp is self-orthogonal, that means the group Sj generated by the operator 
9i = ^Tii where rj is the i-th row of -ffsp) is an Abelian group with size 2""'^. From 
Theorem 4, Si defines an [[n, k]] QECC C. 

For all vectors Ui, U2 with weight < t, where t= [id — 1)/2J , we have 

Hsp (ui - U2) ^ 0^, 
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or, equivalently, 

Therefore C is a non-degenerate QECC with distance d. 

□ 

3.4.1 The CSS construction 

Proposition 5. Given a dual- containing classical binary codes [n,k,d] C, there exists 
an [[n, 2k - n, d\] QECC. 

Proof. Let H be the parity check matrix of C. Since 

rowspace(iJ) = C"*" C C = rowspace(iJ)"'", 



therefore 



(: 









(29) 



is dual-containing, and defines an [n, 2k — n] symplectic code Cgp. By definition of 
classical linear codes, for each nonzero a G (Z2)" such that wt(a) < d, 



Then 



i?sp u / 0^, 



holds for each nonzero u G (^2)^"' with wt(u) < d. Thus Cgp defines a non-degenerate 
[[n, 2k - n, d]] QECC by Proposition 4. □ 

Actually, instead of using the same code C, one can use two codes Ci and C2, such 
that Ci C C2, in the CSS construction [47]. Furthermore, the CSS code have one 
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interesting property that its generators contain all X's and protect against phase flips 
and generators contain all Z's and protect against bit flips. 

3.5 Examples 

3.5.1 The [[9, 1, 3]] Shor code 

The first quantum error-correcting code constructed by Shor [52] was a quantum analog 
of the classical repetition code, which stores information redundantly by duplicating 
each bit several times. We list the stabilizer generators for the [[9,1,3]] Shor code in 
Table 1. It is easy to verify that it can correct arbitrary single-qubit error. 
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Table 1: The [[9,1,3]] Shor code. 
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3.5.2 The [[7,1,3]] Steane code 

The second example, the [[7, 1, 3]] Steane code, is constructed using the CSS construc- 
tion from dual-containing [7, 4, 3] Hamming code with the parity check matrix 



H = 



'^ 1 1 1 1 ^ 



110 11 
10 10 10 1 



(30) 



We list the stabilizer generators in Table 2. 
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Table 2: The [[7,1,3]] Steane code. 



3.6 Discussion 

We have developed a canonical code method together with the stabilizer formalism 
[14, 29, 47] to introduce the standard quantum error-correcting codes. The canonical 
code method provides us essential insight into the error-correcting property. First 
of all, the canonical code is obtained by attaching some ancillas, initially in the |0) 
state, to the quantum information we want to preserve. Therefore the codewords of 



35 



the canonical code can be easily described by a set of commuting Pauli Z operators. 
The error syndrome of each correctable error can be seen as classical information being 
encoded in the canonical code by elementary coding. Therefore, reading out the error 
syndrome is equivalent to recovering the classical message. Then we can restore the 
codewords of the canonical code by performing a correction operation based on the 
measurement outcome since the outcome tells us which error happens. These two 
steps, reading out the error syndrome and performing correction operation, are called 
the decoding operation. 

For a useful QECC, we expect it to be able to correct at least arbitrary t-qubit 
errors, for some t > 1. In this sense, the canonical code is not a satisfactory QECC, but 
we can transform the canonical code to a QECC with desirable distance property. The 
mapping (encoding) is done with some unitary that takes the codespace of the canonical 
code to the codespace specified by the stabilizer of the QECC. Essentially, all QECCs 
developed to date are stabilizer codes. The problem of finding QECCs was reduced to 
that of constructing dual-containing symplectic codes, or equivalently, classical dual- 
containing quaternary codes [14]. When binary codes are viewed as quaternary, this 
amounts to the well known Calderbank-Shor-Steane (CSS) construction [55, 16]. The 
requirement that a code contains its dual is a consequence of the need for a commuting 
stabilizer groTip. The virtue of this approach is that we can directly construct quantum 
codes from classical codes with a certain property, rather than having to develop 
a completely new theory of quantum error correction from scratch. Unfortunately, 
the need for a self-orthogonal parity check matrix presents a substantial obstacle to 
importing the classical theory in its entirety, especially in the context of modern codes 
such as low-density parity check (LDPC) codes [44]. 

In the next chapter, we will show that actually every quaternary (or binary) classi- 
cal linear code, not just dual-containing codes, can be transformed into a QECC, given 
that the encoder Alice and decoder Bob have access to shared entanglement. If the 
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classical codes are not dual-containing, they correspond to a set of stabilizer generators 
that do not commute; however, if shared entanglement is an available resource, these 
generators may be embedded into larger, commuting generators, giving a well-defined 
code space. We call this the entanglement-assisted stabilizer formalism, and the codes 
constructed from it are entanglement-assisted QECCs (EAQECCs). 
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Chapter 4: Entanglement-assisted quantum 
error-correcting codes 

We consider the following communication scenario depicted in Figure 3. The protocol 
involves two spatially separated parties, Alice and Bob, and the resources at their 
disposal are 

• a noisy channel defined by a CPTP map M : >C®" C®^ taking density operators 
on Alice's system to density operators on Bob's system; 

• the c-ebit state |$)®'^ shared between Alice and Bob. 

Alice wishes to send A;-qubit quantum information perfectly to Bob using the above re- 
sources. An [[n, fc; c]] entanglement-assisted quantum error correcting code (EAQECC) 

consists of 

• An encoding isometry £ = U^nc ■ -C®*^ (g) C®" C®'^ 

• A decoding CPTP map V : C®"" ® C®^ C®^ 
such that 

PoA^0^7enc = id®^ 

where C/enc is the isometry which appends the state |$)®'^, 
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Figure 3: A generic entanglement assisted quantum code. 



and id : C ^ C is the identity map on a single qubit. The protocol thus uses up c 
ebits of entanglement and generates k perfect qubit channels. We represent it by the 
resource inequality (with a slight abuse of notation [21]) 

{^f)+c[qq]>k[q^q]. 

Even though a qubit channel is a strictly stronger resource than its static analogue, an 
ebit of entanglement, the parameter k — c is still a good (albeit pessimistic) measure of 
the net noiseless quantum resources gained. It should be borne in mind that a negative 
value of k still refers to a non-trivial protocol. 

4.1 The channel model: discretization of errors 

Again we need to show that we can discretize the errors introduced by M in the 
entanglement-assisted communication scenario. This can be done using steps described 
in Section 3.1. The continuous map M then can be replaced by the error set S = 
supp{Af) by Theorem 3. 

4.2 The entanglement-assisted canonical code 

The entanglement-assisted quantum error-correcting codes (EAQECCs) come from a 
simple idea: replacing some portion of the ancillas of the canonical codes (25) by the 
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|0) 




Figure 4: The entanglement-assisted canonical code. 



maximally entangled states shared between the sender and receiver. We can construct 
the entanglement-assisted (EA) canonical code Cq^ with the following trivial encoding 
operation £q = Uq defined by 

C/o:|¥')^|0)®|$)®^®|(^). (31) 

The operation simply appends i ancilla qubits in the state |0), and c copies of |<I?) 
(the maximally entangled state shared between sender Alice and receiver Bob), to the 
initial register containing the state \ip) of size k qubits, where i + k + c = n. 

Proposition 6. The encoding given by Sq and a suitably- defined decoding map Vq can 
correct the error set 

Eo = {X'^Z^ ® ^ ^a(a,ai,a2)_^/3(a,ai,a2) . a, b G {Z2Y , ai, aa G {1^2)"}, (32) 

for any fixed functions a, (5 : (Zg)^ x {7.2)" x {'L2Y (Zg)*^. 

Proof. The protocol is shown in Figure 4. After applying an error G Eq, the channel 
output becomes (up to a phase factor): 

(X^Z'')|0)®(Z^iX^2^/^)|$)®'=®(X"(^'^i'^2)^/3(a,ai,a2)^|^^ ^ |a)® |ai, a2)«)|¥5') (33) 
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where 



I a) = X^Z^\0) = X'^IO) (34) 
|ai,a2) = (35) 

(37) 

As the vector (a, ai,a2,b) completely specifies the error E, it is called the error syn- 
drome. The state (33) only depends on the reduced syndrome r = (a, ai,a2). In effect, 
a and (ai, a2) have been encoded using elementary and superdense coding, respectively. 
Bob, who holds the entire state (33), can identify the reduced syndrome. Bob simulta- 
neous measures the Z^^ , . . . , Z'^' observables to decode a, the X'^'^ (giX*^^ , . . . , X*^" ^X^" 
observables to decode ai, and the Z^^ (g) Z^^, ... , Z^" (g) Z^" observables to decode a2. 
He then performs X"(^'^i'^2)2'/3(a,ai,a2) ^j^g remaining k qubit system \(p'), restoring 
it to the original state \(p). 

Since the goal is the transmission of quantum information, no actual measurement 
is necessary. Instead, Bob can perform the following decoding Vq consisting of the 
controlled unitary 

Uo,dec= Yl |a)(a|®|ai,a2)(ai,a2|®X-"('^''^i''^^)z-''(-'-i'-^), (38) 

a,ai ,a2 

followed by discarding the unwanted subsystems. 

□ 

We can rephrase the above error-correcting procedure in terms of the stabilizer 
formalism. Let So = (<So,7; >5o,e), where <So,/ = {Zi, ■ ■ ■ , Zg) is the isotropic subgroup 
of size 2^ and 5o,e = (-^^+1, • • • , -^£+0 ^e+i: ' ' ' i ^i+c) is the symplectic subgroup of 
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size 2 . We can easily construct an Abelian extension of So that acts on n + c qubits, 
by specifying the foUowing generators: 

(39) 

Ze+c ® Zc, 
Xe+c ® ^c, 

where the first n qubits are on the side of the sender (Ahce) and the extra c qubits 
are taken to be on the side of the receiver (Bob). The operators Zi or to the right 
of the tensor product symbol above is the Pauli operator Z or X acting on Bob's i-th 
qubit. We denote such an Abelian extension of the group Sq by Sq. It is easy to see 
that the group Sq fixes the code space Cq"^ (therefore Sq is the stabilizer for Cq^), and 
we will call the group Sq the entanglement- assisted stabilizer for Cq'^. 

Consider the parameters of the EA canonical code. The number of ancillas i is 
equal to the number of generators for the isotropic subgroup Soj. The number of ebits 
c is equal to the number of symplectic pairs that generate the entanglement subgroup 
5o,_E- Finally, the number of logical qubits k that can be encoded in Cq^ is equal 
to n — i — c. To sum up, Cq'^ defined by Sq is an [[n, k; c]] EAQECC that fixes a 
2'^-dimensional code space. 

Proposition 7. The EAQECC C^"^ defined by Sq = {So,i,So,e) can correct an error 
set Eo if for all Ei,E2 G Eq, eIEi g So,i[j{gn - Z{{So,i,So,e))). 
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Proof. Since the vector (a, ai,a2,b) completely specifies the error operator E, we 
consider the following two different cases: 

• If two error operators Ei and E2 have the same reduced syndrome (a, ai, a2), then 
the error operator £^2-^1 gives us the all-zero syndrome. Therefore, E^Ei G Sqj. 
This error -E'l^'i has no effect on the codewords of C^^. 

• If two error operators Ei and E2 have different reduced syndromes, and let 
(a, ai,a2) be the reduced syndrome of E^Ei, then £^2-^1 ^ Z{{Soj,So,e))- This 
error E^Ei can be corrected by the decoding operation given in (38). 

□ 

4.3 The general case 

Theorem 5. Given a general group S = {Si,Se) with the sizes of Sj and Se being 
2n-fc-c 22c^ respectively, there exists an [[n,k;c]] EAQECC C^-^ defined by the 
encoding and decoding pair {SjT)) with the following properties: 

(1) . The code C^^ can correct the error set E if for all Ei,E2 e E, eIEi e Sj \J{Gn - 

Z{{Sj,Se))). 

(2) . The codespace C^^ is a simultaneous eigenspace of the Abelian extension of S, 

S. 

(3) . To decode, the reduced error syndrome is obtained by simultaneously measuring 

the observables from S. 

Proof. Since the commutation relations of S are the same as the EA stabilizer Sq 
for the EA canonical code Cq^ in the previous section, by Lemma 2, there exists an 
unitary matrix U such that So = USU"^. The protocol is shown in Figure 5. Define 
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Figure 5: Generalizing the entanglement-assisted canonical code construction. 

£ = J7^^ o £q and P = T>q o U, where IJ is the trivial extension of U are Bob's Hilbert 
space, and So and Pq are given in (31) and (38), respectively. 



(1). Since 



for any Eq gEq, then 



VoEo£ = id®'^ 



follows for any G E. Thus, the encoding and decoding pair {S,V) corrects E. 
Following Proposition 7, the correctable error set E contains all Ei , E2 such that 

ElEieSi[j{gn-Z{{Si,SE))). 

(2) . Since C^^ is the simultaneous +1 eigenspace of Sq, S = U~^SqU, and by defi- 

nition C^^ = U^^{Cq^), we conclude that C^^ is a simultaneous eigenspace of 
S. 

(3) . The decoding operation Vq involves 

i. measuring the set of generators of Sq, yielding the error syndrome according 
to the error Eq. 

ii. performing a recovering operation £^0 again to undo the error. 
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By Lemma 4, performing T> = T>q o U is equivalent to measuring S = U SqU, 
followed by performing the recovering operation U~^EqU based on the measure- 
ment outcome, followed by tj to undo the encoding. 



4.4 Generalized construction from quaternary codes 

Proposition 8. // o classical [ra, fe, d\ code C4 exists then an [[n, 2k — n + c, d; c]] 
EAQECC exists for some non-negative integer c. 

Proof. Let H4 be the {n — k)xn quaternary parity check matrix for C,i. By Proposition 
1, there exists an [n,2k — n,d] symplectic code Csp with parity check matrix Hgp = 
^{Hi), where 



for each nonzero u G (^2)^'^ with wt(u) < d. 

For simplicity, let V = rowspace(i?sp)- Theorem 1 shows that there exists a 
symplectic basis consisting of hyperbolic pairs (ui,Vi), i = 1,2, ••• ,n, such that 
{ui, • • • , Uc+£, vi, • • • , Vc} is a basis for V . Then by the map N : (^2)^" Qn, the 
group S = {Sj, Se), defines an [[n, 2k — n-\- c,d; c]] EAQECC by Theorem 5, where 



□ 




(40) 



Notice that even if 2A; — n < 0, the following still holds 



Si = (iV, 



Uc+l ) 



' "(c+(!) 
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and 



c = - dim sympF. 



When c = 0, V is dual-containing. The above construction wiU give us standard 



Any classical binary [n, k, d] code may be viewed as a quaternary [n, k, d]^ code. In 
this case, the above construction gives rise to a CSS-type code. 

4.5 Bounds on performance 

In this section we shall see that the performance of EAQECCs is comparable to the 
performance of QECCs (which are a special case of EAQECCs). 

The two most important outer bounds for QECCs are the quantum Singleton bound 
[34, 51] and the quantum Hamming bound [28]. Given an [[n,A;,ci]] QECC (which is 
an [[n, /c, d;0]] EAQECC), the quantum Singleton bound reads 



The quantum Hamming bound holds only for non-degenerate codes and reads 



The proofs of these bounds [28, 51] are easily adapted to EAQECCs. This was first 
noted by Bowcn [10] in the case of the quantum Hamming bound. Consequently, 
an [[n, k, d; c]] EAQECC satisfies both bounds for any value of c. Note that the F4 
construction connects the quantum Singleton bound to the classical Singleton bound 
n — k > d — 1. An [n,k,d\ quaternary code saturating the classical Singleton bound 



quantum error-correcting codes. 



□ 



n-k> 2{d-l). 
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implies an [[n, 2k — n + c, d; c]] EAQECC saturating the quantum Singleton bound, 
that is n - (fc - c) > 2{d - 1). 

It is instructive to examine the asymptotic performance of quantum codes on a 
particular channel. A popular choice is the tensor power channel A/"®", where J\f is 
the depolarizing channel with Kraus operators {^/poI, ^Jp\X, ^Jp2Y, -^^/p^Z}, for some 
probability vector p = {po,Pi,P2,P3)- 

It is well known that the maximal transmission rate R = k/n achievable by a non- 
degenerate QECC (in the sense of vanishing error for large n on the channel AA®") is 
equal to the hashing bound R = 1 — H{p). Here H{p) is the Shannon entropy of the 
probability distribution p. This bound is attained by picking a random self-orthogonal 
code. However no explicit constructions are known which achieve this bound. 

Interestingly, the F4 construction also connects the hashing bound to the Shannon 
bound for quaternary channels. Consider the quaternary channel a 1-^ a + c, where 
c takes on values 0, a;, l,a), with respective probabilities Po,Pi,P2,P3- The maximal 
achievable rate R = k/n for this channel was proved by Shannon to equal R = 2 — H{p). 
An [n, k] quaternary code saturating the Shannon bound implies an [[n, 2k — n + c; c]] 
EAQECC, achieving the hashing bound! 

4.6 Table of codes 

In [15] a table of best known QECCs was given. Below we show an updated table 
which includes EAQECCs. 

The entries with an asterisk mark the improvements over the table from [15]. All 
these are obtained from Proposition 3.1. The corresponding classical quaternary code 
is available online at http://www.win.tue.nl/~aeb/voorlincod.html. 
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Table 3: Highest achievable minimal distance d in any [[n, fc, d; c]] EAQECCs. 

The general methods from [15] for constructing new codes from old also apply 
here. Moreover, new constructions are possible since the self-orthogonality condition 
is removed. An example is given by the following Theorem. 

Theorem 6. (a) Suppose an [[n,k,d;c]] code exists, then an [[n + l,k — l,d';c']] code 
exists for some c' and d' > d; 

(b) Suppose a non- degenerate [[n,k,d;c]] code exists, then an [[n — l,k + l,d — l;c']] 
code exists for some d . 

Proof, (a) Recall that the net yield \sk = k — c. Let H be the (n — x 2n) parity check 
matrix of the [[ra, k, d; c]] code. The parity check matrix of the new [[n + l, k — l, d'; c']] 
is then 

^ ■■■ 
1 ••• 1 1 

H'= 

Hz ; 





V 



1...1 l^ 

••• 



Hx ■■. 




(41) 
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This corresponds to the classical construction of adding a parity check at the end of 
the codeword [46]. The additional rows ensure that errors involving the last qubit 
are detected. Sometimes the distance actually increases: for instance, the [[8, 0, 4]] is 
obtained from the [[7, 1, 3]] code in this way. 

(b) We mimic the classical "puncturing" method [46]. Let C be the (n + k)- 
dimensional subspace of (^2)^" corresponding to the [[n, A;, d; cj] EAQEC code. Punc- 
turing C by deleting the first Z and X coordinate, we obtain a new "code" C 
which is an (n + A;)-dimensional subspace of (Z2)^'-"'~"'^'*. This corresponds to an 
[[n— 1, fc+l, d—l\ c'j] EAQEC code, as the minimum distance between the "codewords" 
of C decreases by at most 1. □ 

4.7 Discussion 

Motivated by recent developments in quantum Shannon theory, we have introduced 
a generalization of the stabilizer formalism to the setting in which the encoder Alice 
and decoder Bob pre-share entanglement (EAQECCs). The powerful canonical code 
technique again provides us essential insight into the error-correcting property. First 
of all, the entanglement-assisted canonical code is obtained by replacing some ancillas 
of the standard canonical code with maximally entangled states. The codewords of 
the entanglement-assisted canonical code then can be described by a set of commuting 
operators (see (39)). The error syndrome of each correctable error can be seen as clas- 
sical information being encoded in the entanglement-assisted canonical code by either 
elementary coding or superdense coding. Therefore, reading out the error syndrome is 
equivalent to recovering the classical message. Then we can restore the codewords of 
the entanglement-assisted canonical code by performing a correction operation based 
on the measurement outcome since the outcome tells us which error happens. These 
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two steps, reading out the error syndrome and performing correction operation, are 
called the decoding operation. 

Up to this point, the entanglement-assist canonical code is nothing but the stabilizer 
formalism. What makes the entanglement-assisted canonical code different is when half 
of the maximally entangled states are assumed to be originally possessed by the receiver 
Bob (These half of ebits do not go through the noisy channel). Then the operators 
on Alice's sie form a non-commuting set of generators, allowing us to map arbitrary 
classical quaternary codes to EAQECCs. 

There are two practical advantages of EAQECCs over standard QECCs: 

(1) . They are much easier to construct from classical codes because self-orthogonality 

is not required. This allows us to import the classical theory of error correction 
wholesale, including capacity-achieving modern codes. The attraction of these 
modern codes comes from the existence of efficient decoding algorithms that pro- 
vide excellent trade-off between decoding complexity and decoding performance. 
In fact, these decoding algorithms, such as sum-product algorithm, can be mod- 
ified to decode the error syndromes effectively [44]. The only problem of using 
these iterative decoding algorithms on quantum LDPC actually comes from those 
shortest 4-cycles that were introduced inevitably because of self-orthogonality 
constrain. However, we have demonstrated recently that by allowing assisted 
entanglement, those 4-cycles can be eliminated completely, and the performance 
of the iterative decoding improves dramatically by our numerically simulation 
results (see Chapter 7). This finding further confirms the contribution of our EA 
formalism. 

(2) . Comparing [[n, A;, d; c]] EAQECCs to [[n, A;,d;0]] QECCs is not being entirely 

fair to former, since the entanglement used in the protocol is a strictly weaker 
resource than quantum communication. However, by using an EAQECC, we 
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typically achieve a higher rate for the same distance, or a higher distance for the 
same rate, than a QECC; and because entanglement is a "cheaper" resources, this 
is often a worthwhile trade-off. Or to think of it a different way, if we construct 
an EAQECC and a QECC from two classical codes with the same parameters 
[n, k, d], the EAQECC will have a higher rate; or by using an EAQECC derived 
from a classical code with higher distance and lower rate, we can achieve the 
same rate and a higher distance than a QECC. 

If one is interested in applications to fault tolerant quantum computation, where the 
resource of entanglement is meaningless, high values of c are unwelcome because they 
require a long seed QECCs. We expect this obstacle to be overcome by bootstrapping. 

Another fruitful line of investigation connects to quantum cryptography. Quantum 
cryptographic protocols, such as BB84, are intimately related to CSS QECCs. In [41] 
it is shown that EAQECCs analogues of CSS codes give rise to key expansion protocols 
which do not rely on the existence of long self-orthogonal codes. 
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Chapter 5: Operator quantum error-correcting codes 



In this chapter, we will briefly review the well-known operator quantum error-correcting 
codes (OQECCs) , using the canonical code method and linking to the operator stabi- 
lizer formalism. 

5.1 The canonical code 

The idea of OQECCs also comes from a simple idea: replacing some portion of the 
ancillas of the canonical code (25) by some garbage states. We can construct the 
operator canonical code Cq^ with the following trivial encoding operation £q defined 



The operation simply appends s ancilla qubits in the state |0), and an arbitrary state 
a of size r qubits, to the initial register containing the state \ip) of size k qubits, 
where s + k + r = n. These r extra garbage qubits are called the gauge qubits. Two 
states of this form which differ only in a are considered to encode the same quantum 
information. 

Proposition 9. The encoding given by Sq and a suitably- defined decoding map Vq can 
correct the error set 



by 



So : \ip){ip\ |0X0| 0(7(8) |(^)(^|. 



(42) 



Eo = {X'^Z^ ® X^'Z'^ ® : a, b G (Z2)^ c, d G (Zg)"} 



(43) 
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Figure 6: The operator canonical code. 
for any fixed functions a,P : — ^ {'^2)'' ■ 

Proof. The protocol is shown in Figure 6. After applying an error E E'Eq, the channel 
output becomes (up to a phase factor): 



{X^Z^)\0){0\{X''Zy {X''Z'^)a{X''Zy ® {X°'^^^ Z^'-''^)\^){ip\{X°'^''^ Z^^^^)^ 
=\a.){a\ (g) a' (g) \ip'){ip'\ 



(44) 



where 



|a) = X-\0), 

a' = (X^Z'^)a(X'=Z^)t, 
\^') = (X°^(^)Z^(^))|(^). 



(45) 
(46) 
(47) 



As the vector (a, b,c, d) completely specifies the error operator E, it is called the 
error syndrome. However, in order to correct this error, only the reduced syndrome 
a matters. Here two kinds of passive error correction are involved. The errors that 
come from vector b are passively corrected because they do not affect the encoded 
state given in (42). The errors that come from vector (c, d) are passively corrected 
because of the subsystem structure inside the code space: p a and a' represent 
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the same information, differing only by a gauge operation. Though these errors change 
the encoded states, they do not damage the information encoded in the states. 

The decoding operation Pq is constructed based on the reduced syndrome, and is 
also known as collective measurement. Bob can recover the state \ip) by performing 
the decoding Vq: 



We can rephrase the above error-correcting procedure in terms of the stabilizer 
formalism. Let Sq = {Soj,So^g), where Sqj = {Zi, • • • , Zg) is the isotropic subgroup 
of size 2* and »So,G = {Zs+i, ■ ■ ■ , Zg+r, Xs+i, • • • , Xg+r) is the symplectic subgroup of 
size 

It follows that the two subgroups {Soj,So^g) define the canonical OQECC Cq^ 
given in (42). The subgroup So,i defines a 2*^+''-dimensional code space C^^ , and the 
gauge subgroup <So,G specifies all possible operations that can happen on the gauge 
qubits. Thus we can use 5o,g to define an equivalence class between two states in the 
code space of the form: p (g) cr and p® a' , where /9 is a state on T^f*^, and a, a' are 
states on T^f''. Consider the parameters of the canonical code. The number of ancillas 
s is equal to the number of generators for the isotropic subgroup Sqj. The number 
of gauge qubits r is equal to the number of symplectic pairs for the gauge subgroup 
»So,G- Finally, the number of logical qubits k that can be encoded in Cq^ is equal to 
n — s — r. To sum up, C^^ defined by {Soj,So,g) is an [[n, k; r]] OQECC that fixes a 
2^^ "'"''-dimensional code space, within which p^a and p^a' are considered to carry the 
same information. Notice that there is a tradeoff between the number of encoded bits 
and gauge bits, in that we can reduce the rate by improving the error-avoiding ability 
or vice versa. 




(48) 



a 



followed by discarding the unwanted systems. 



□ 
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Proposition 10. The OQECC Cq defined by {So.i,So,g) can correct an error set Eq 
if for all Ei,E2 € Eq, eIEi g {So,i,So,g) UiQn - 2{So,i)). 

Proof. Since the vector (a, b, c, d) completely specifies the error operator E, we con- 
sider the following two different cases: 

• If two error operators Ei and E2 have the same reduced syndrome a, then the er- 
ror operator £^2-^1 gives us all-zero reduced syndrome with some vector (b,c,d). 
Therefore, eIEi G {So,i,So,g)- This error E^Ei has no effect on the logical state 

• If two error operators Ei and E2 have different reduced syndromes, and let a be 
the reduced syndrome of E^Ei, then E^Ei Z{Soj). This error £^2-^1 can be 
corrected by the decoding operation given in (48). 

□ 

5.2 The general case 

Theorem 7. Given a general group S = {Si,Sg) with the sizes of Sj and Sg being 
2n-k-r 2^^^ respectively, there exists an [[n,k;r]] OQECC C^^ defined by the 

encoding and decoding pair {S^V) with the following properties: 

(1 ) . The code can correct the error set E if for all £1, £2 € E, eIEi G {Si,Sg) {j{Qn- 

Z{Si)). 

(2) . The codespace C^^ is a simultaneous eigenspace of Sj. 

(3) . To decode, the reduced error syndrome is obtained by simultaneously measuring 

the observables from Si. 

Proof. Since the commutation relations of »S = {Si,Sg) are the same as the OP sta- 
bilizer (So = ('5o,/,5o,g) for the OP canonical code C^^ in the previous section, by 
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Figure 7: The operator quantum error-correcting code. 

Lemma 2, there exists an unitary matrix U such that »So = USU~^. The protocol is 
shown in Figure 7. Define 6 = o Sq and V = VooU, and Sq and Vq are given in 
(42) and (48), respectively. 



(1). Since 



Vqo Eqo £q = i( 



for any £"0 G Eq, then 



VoEoS = 'iS 



follows for any £' G E. Thus, the encoding and decoding pair (SjV) corrects 
E. Following Proposition 10, the correctable error set E contains all Ei,E2 such 
that eIei e {Si,Sg) [jiGn - 2:{Si)). 

(2) . Since C^^ is the simultaneous +1 eigenspace of So,i, S = W^SqU, and by 

definition C^^ = U~^(C^^), we conclude that C^^ is a simultaneous eigenspace 
of 5/. 

(3) . The decoding operation Vq involves 

i. measuring the set of generators of Sq, yielding the error syndrome according 
to the error Eq. 



ii. performing a recovering operation £^0 again to undo the error. 
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By Lemma 4, performing D = Dq o U is equivalent to measuring S = U SqU , 
followed by performing the recovering operation U~^EqU based on the measure- 
ment outcome, followed by tj to undo the encoding. 

□ 

5.3 Discussion 

The idea of the operator canonical code comes from replacing some portion of ancillas 
of the standard canonical code with an arbitrary garbage state that we do not care 
about. In terms of the operator stabilizer formalism, the codespace of the operator 
canonical code is described by a set of commuting Pauli Z operators together with a 
set of anti-commuting operators specifying all possible operations that can occur on 
the garbage state. These operations on the garbage state do not affect our quantum 
information, therefore no correction is needed, and thus the passive error-correcting 
power is increased. The error syndrome of each correctable error can be seen as clas- 
sical information being encoded in the operator canonical code by elementary coding. 
Therefore, reading out the error syndrome is equivalent to recovering the classical mes- 
sage. Then we can restore the codewords of the operator canonical code by performing 
a correction operation based on the measurement outcome since the outcome tells us 
which error happens. These two steps, reading out the error syndrome and performing 
correction operation, are called the decoding operation. 

The operator quantum error-correcting codes are a combination of standard quan- 
tum error-correcting codes (active error correction) and the passive passive error- 
avoiding schemes, such as decoherence-free subspaces and noiseless subsystems. The 
operator stabilizer is generated by a set of non-commuting generators. Therefore, we 
can map arbitrary classical quaternary codes to OQECCs, though the distance of the 
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OQECCs is not always guaranteed. There has been a couple of clever construction of 
OQECCs whose distance is inherited from their classical counterpart [1, 38]. 

The advantage of OQECCs comes from the fact that it is not necessary to actively 
correct all errors, but rather only to perform correction modulo the subsystem struc- 
ture. One potential benefit of the new decoding procedure is to improve the threshold 
of fault-tolerant quantum computation. This research direction remains a hot topic in 
quantum computation. 
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Chapter 6: Entanglement-assisted operator quantum 
error-correcting codes 

Now it becomes clear how to combine the idea of entanglement-assisted and operator 
formalism, to construct the entanglement-assisted operator quantum error-correcting 
codes (EAQECCs). We will begin with its canonical code. 

6.1 The canonical code 

We illustrate the idea of EAOQECCs by the following canonical code. Consider the 
trivial encoding operation Sq defined by 

So : \vM ^ \0){0f' I^X^I®'^ a C5 (49) 

The operation simply appends s ancilla qubits in the state |0), c copies of |$) (a 
maximally entangled state shared between sender Alice and receiver Bob), and an 
arbitrary state a of size r qubits, to the initial register containing the state \(p) of size 
k qubits, where s + k + r + c = n. These r extra qubits are the gauge qubits. Two 
states of this form which differ only in a are considered to encode the same quantum 
information. 



59 



(p=\(p){(p\ 




Figure 8: The entanglement-assisted operator canonical code. 

Proposition 11. The encoding given by So and a suitably- defined decoding map Vq 
can correct the error set 



Eo ={X^Z^ (g) ^ x^'Z^ (g) X"(^'^i'^2)2-^(a,ai,a2) . 

a,b G (Z2)^al,a2 € (Z2)'=,c,d G (Zsf}, 



(50) 



for any fixed functions a,/3 : {^2)^ x {^2)^ x (^2)"^ (^2)*^. 

Proof. The protocol is shown in Figure 8. After applying an error i? G Eq, the channel 
output becomes (up to a phase factor): 



|a)(a| (g) |ai,a2)(ai,a2| (g a' (g) 



(51) 



where 



|ai,a2) 



If') 



x-\o), 

(Z^1X^2 ^/^)|$)®^ 
(X'=Z'^)cT(X^Z'^)t, 

^ j^a(a,ai ,a2 ) _2-/5(a,ai ,a2) ^ | _ 



(52) 
(53) 
(54) 
(55) 
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As the vector (a, ai, a2, b, c, d) completely specifies the error operator E, it is called 
the error syndrome. However, in order to correct this error, only the reduced syndrome 
(a, ai,a2) matters. The entanglement-assisted operator canonical code C^^^ keeps 
advantages of both EAQECCs and OQECCs. On one hand, the two kinds of passive 
error correction are preserved. On the other hand, the power of active error correction 
is increased by the use of pure entanglement. 

The decoding operation Vq is constructed based on the reduced syndrome. Bob 
can recover the state \ip) by performing the decoding Vq: 

Po = ^ |a)(a| (g) |ai,a2)(ai,a2| (8) I 

a,ai,a2 (55) 

followed by discarding the unwanted systems. □ 

We can rephrase the above error-correcting procedure in terms of the stabilizer 
formalism. Let Sq = {Soj,So^s), where Sqj = {Zi, • • • , Zs) is the isotropic subgroup of 
size 2* and Sq^s = {^s+i, ' Zs+c+r-, ^s+i-, ' ■, ^s+c+r) is the symplectic subgroup of 
size 2^^"^+''). We can further divide the symplectic subgroup So,s into an entanglement 
subgroup 

^0,E = {Zs+l, ■ ■ ■ , Zg+c, ^s+lj ■ ■ ■ ) ^s+c) 

of size 2^^^ and a gauge subgroup 

So,G = {Zs+c+l, ■ ■ ■ ) ^s+c+r, " " " 5 ^s+c+r) 
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of size 2^'', respectively. The generators of (5o,/, 5o,_e, 5o,g) are arranged in the foUow- 
ing form: 

Z^i I II 
I Z^i I I 
I X^i I I 

(57) 

I I Z^i I 
I I I 

i — > i — > i — > 

s c r k 

where {eijjgj^], {ej}jg[c], and {e/};g[r] are the set of standard bases in (^2)*, ^"if-, 
and (^2)^, respectively, and [A;] = {1, • • • , A;}. 

It follows that the three subgroups (5o,7, 5o,e, 5o,g) define the canonical code C^^° 
given in (49). The subgroups 5o,/ and 5o,e define a 2'^"'"''-dimensional code space 
^EAO ^ -^(g)(n+c)^ g^j^^ gauge subgroup »So,G specifies all possible operations that 
can happen on the gauge qubits. Thus we can use <So,G to define an equivalence class 
between two states in the code space of the form: pigJ cr and p®o' ^ where /9 is a state on 
H®^ ^ and (7, a' are states on 'H®'^ . Consider the parameters of the canonical code. The 
number of ancillas s is equal to the number of generators for the isotropic subgroup 
5o,/. The number of ebits c is equal to the number of symplectic pairs that generate 
the entanglement subgroup 5o,e. The number of gauge qubits r is equal to the number 
of symplectic pairs for the gauge subgroup »So,G- Finally, the number of logical qubits 
k that can be encoded in C^^^ is equal to n — s — c — r. To sum up, C^^o defined by 
(5o,/, 5o,_B, ^cg) is an [[n, k\ r, c]] EAOQECC that fixes a 2'^+^-dimensional code space, 
within which p® a and p® a' are considered to carry the same information. 

Proposition 12. The EAOQECC C^^*^ defined by {Soj,So,e,So,g) can correct an 
error set Eq if for all Ei,E2 G Eq, E^Ei G (5o,/, 5o,g) U(^^n - Zi{So,i,So,E))). 

Proof. Since the vector (a, ai, a2, b, c, d) completely specifies the error operator E, we 
consider the following two different cases: 
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Figure 9: The entanglement-assisted operator quantum error-correcting code. 

• If two error operators Ei and E2 have the same reduced syndrome (a, ai,a2), 
then the error operator gives us all-zero reduced syndrome with some vector 
(b,c,d). Therefore, E^Ei G (5o,7,<So,g)- This error E^Ei has no effect on the 
logical state \(p){(p\- 

• If two error operators Ei and E2 have different reduced syndromes, and let 
(a, ai,a2) be the reduced syndrome of E^Ei, then eIEi Z{{Soj,So,e))- This 
error -B^-^i can be corrected by the decoding operation given in (56). 



□ 



6.2 The general case 

Theorem 8. Given the subgroups {Si,Se,Sg), there exists an [[n, k; r, c]] entanglement- 
assisted operator quantum error- correcting code C^" defined by the encoding and de- 
coding pair: {£,7)). The code C^^^ can correct the error set E if for all Ei,E2 G E, 
eIEi e {Si,Sg) UiGn - Z{{Si,Se))). 
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Proof. Since S ^ Sq, there exists an unitary matrix U that preserves the commutation 
relations. The protocol is shown in Figure 9. Define £ = o £q and V = VqoU, 
where Sq and Vq are given in (49) and (56), respectivley. Since 

for any £ Eq, then 

VoEo£ = id®^ 

follows for any £^ G E. Thus, the encoding and decoding pair {£,T>) corrects E. □ 

We say that the [[n, k, d; r, c]] EAOQECC C'^'^° has distance d if it can correct any 
error set E such that for each operator E e'E, the weight t of E satisfies 2t + 1 < d. 

6.3 Properties of EAOQECCs 

In the description earlier in this chapter, we assumed that the gauge subgroup was 
generated by a set of symplectic pairs of generators. In some cases, it may make sense 
to start with a gauge subgroup which itself has both an isotropic (i.e., commuting) 
and a symplectic subgroup. In this case, we can arbitrarily add a symplectic partner 
for each generator in the isotropic subgroup of the gauge group. This can be useful in 
constructing EAOQECCs from EAQECCs, in a way analogous to how OQECCs can be 
constructed by starting from standard QECCs. Poulin shows in [50] that it is possible 
to move generators from the stabilizer group into the gauge subgroup, together with 
their symplectic partners, without changing the essential features of the original code. 
We provide an example of such a construction in section 6.4.2. 

There is further flexibility in trading between active error correction ability and 
passive noise avoiding ability [1]. This is captured by the following theorem: 
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Theorem 9. We can transform any [[n, k + r, di;0, c\] code Ci into an [[n, A;, ^2; c]] 
code C2, and transform the [[n, k, d2\r, c]] code C2 into an [[n, k, ^3; 0, c]] code C3, where 
di < d2 < ds. 

Proof. There exists an isotropic subgroup Si and an entanglement subgroup Se associ- 
ated with Ci of size 2* and 2^"^, respectively. These parameters satisfy s + c+k + r = n. 
This code Ci corresponds to an [[n,k + r,di; 0, c]] EAQECC for some di . If we add the 
gauge subgroup Sq of size 2^'', then {Si,Se,Sg) defines an [[n,k,d2;r,c]] EAOQECC 
C2 for some c?2, which follows from Theorem 8. Let Ei be the error set that can be 
corrected by Ci, and E2 be the error set that can be corrected by 62- Clearly, Ei C E2 
(see the following table), so C2 can correct more errors than Ci. By sacrificing part of 
the transmission rate, we have gained additional passive correction, and ^2 > di- 

If we now throw away half of each symplectic pair in Sq and include the remaining 
generators in Sj, which becomes 5j, the size of the isotropic subgroup increases by 
a factor of 2^ Then {S'j,Se) defines an [[n, A;, da; 0, c]] EAQECC C3. Let E3 be the 
error set that can be corrected by C3. Let E G E2, then either E G {Si,Sg) or 
E^Z{{Si,Se)). 

• UE e {Si,Sg), then either E e S'^ ot E e {Si,Sg)/S'j. If E e {Si,Sg)/S'j, this 
implies E Z{S'j). Thus, E G E3. 

. Since {Si,Se) C {S'j,Se), wehave Z{{S'j,Se)) C Z{{Si,Se)). HE ^ Z{{Si,Se)), 
then E Z{{S'j,Se)). Thus, E e E3. 

Putting these together we get E2 C E3. Therefore c?3 > c?2- □ 

To conclude this section, we list the different error-correcting criteria of a conven- 
tional stabilizer code (QECC), an EAQECC, an OQECC, and an EAOQECC in Table 
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eIEi ^ Z{Si) 




OQECC 


EAOQECC 


^1^1 Z{Si) 
eIe, g (57,5g) 


ElEi^Z{{Si,SE)) 

eIEi g {Si,Sg) 



Table 4: Summary of error-correcting criteria. 



6.4 Examples 

6.4.1 EAOQECC from EAQECC 

Our first example constructs an [[8, l,3;c = l,r = 2]] EAOQECC from an [[8,1,3;!]] 
EAQECC. Consider the EAQECC code defined by the group 5 generated by the 
operators in Table 5. Here Z and X refer to the logical Z and X operation on the 
codeword, respectively. The isotropic subgroup is Sj = {81,82, 83,84, S^jSs), the 
entanglement subgroup is Se = {8q,8'7), and together they generate the full group 
5 = {Si,Se)- This code C{Si,Se) encodes one qubit into eight physical qubits with 
the help of one ebit, and therefore is an [[8, 1; 1]] code. It can be easily checked that 
this code can correct an arbitrary single-qubit error, and it is degenerate. 

By inspecting the group structure of S, we can recombine the first four stabilizers 
of the code to give two isotropic generators (which we retain in Si), and two generators 
which we include, together with their symplectic partners, in the subgroup Sq, for two 
qubits of gauge symmetry. This yields an [[8, l,3;c = l,r = 2]] EAOQECC whose 
generators are given in Table 6. where Sj = {8[, 82, 8'^, 8q), Se = {8'^, 8'^), and 
Sg = {9i, 91,92,92) ■ 
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Tabic 5: The original [[8,l,3;c = 1]] EAQECC encodes one qubit into eight physical 
qubits with the help of one ebit. 

6.4.2 EAOQECCs from classical BCH codes 

EAOQECCs can also be constructed directly from classical binary codes. Before we 
give examples, however, we need one more theorem: 

Theorem 10. Let H he any binary parity check matrix with dimension {n — k) x n. 
We can obtain the corresponding [[n, 2fe — n + c; c]] EAQECC, where c = iank{HH^) 
is the number of ebits needed. 

Proof. By the CSS construction, let H be 
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Table 6: The resulting [[8,l,3;c = l,r = 2]] EAOQECC encodes one qubit into eight 
physical qubits with the help of one ebit, and create two gauge qubits for passive error 
correction. 
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Let S be the group generated by H, then S = (^'"^ • • • , Z^'^-'' , X^'^ , ■ ■ ■ where 
Tj is the i-th row vector of H. Now we need to determine how many symplectic pairs 
are in group S. Since Tank{HH^) = c, there exists a matrix P such that 



PHH' P 



TryT 




















Iqxq 








Iqxq 





















(n— fc)x(n— fc) 



where p + 2q = c. Let r'- be the z-th row vector of the new matrix PH, then S = 



Using the fact that {Z^,X^} = if and only if a • b = 1, we know that the 
operators Z^i,X^i for 1 < z < p, and the operators Z^p+i , X^p+i+j for 1 < j < q, 
generate a symplectic subgroup in S of size 2^"^. □ 

Definition 1. [46] cyclic code of length n over GF(p"^) is a BCH code of designed 
distance d if, for some number b >0, the generator polynomial g{x) is 



g{x) = lcm{M''{x),M''+\x),--- , M"-^"-'^ (x)} , 



rb+d-2 j 



where M^{x) is the minimal polynomial of over GF(p'^). I.e. g{x) is the lowest 
degree monic polynomial over GF(p"^) having a^, a''"'"^, • • • ,a.''~^'^~^ as zeros. When 
b = 1, we call such BCH codes narrow-sense BCH codes. When n = p^ — 1, we call 
such BCH codes primitive. 
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Consider the primitive narrow-sense BCH code over GF(2®). This code has the 
following parity check matrix 
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a2 . 




\ 
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c? 
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• a3(n-l) 






1 
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V 


1 




• 




/ 



where a G GF(2^) satisfies + a + 1 = and n = 63. Since all finite fields of 
order are isomorphic, there exists a one-to-one correspondence between elements 
in {a^ : j = 0,1, - ■ ■ — 2, oo} and elements in {ao,ai,--- ,am ■ cii & GF{p)}. If 
we replace G GF(2®) in (59) with its binary representation, this gives us a binary 
[63, 39, 9] BCH code whose parity check matrix H2 is of size 24 x 63. If we carefully 
inspect the binary parity check matrix H2, we will find that the first 18 rows of H2 
give a [63, 45, 7] dual-containing BCH code. 

Prom Theorem 10, it is easy to check that c = rank(i?2-f^J) = 6. Thus by the 
CSS construction [13], this binary [63,39,9] BCH code will give us a corresponding 
[[63, 21, 9; 6]] EAQECC. 

If we further explore the group structure of this EAQECC, we will find that the 
6 symplectic pairs that generate the entanglement subgroup Se come from the last 
6 rows of H2. (Remember that we are using the CSS construction.) If we remove 
one symplectic pair at a time from Se and add it to the gauge subgroup Sq, we get 
EAOQECCs with parameters given in Table 7. 

In general, there could be considerable freedom in which of the symplectic pairs is 
to be removed. There are plenty of choices in the generators of Se- In fact, it does 
not matter which symplectic pair we remove first in this example, due to the algebraic 
structure of this BCH code. The distance is always lower bounded by 7. 
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Table 7: Parameters of the EAOQECCs constructed from a classical [63,39,9] BCH 
code, where r represents the amount of gauge qubits created and c represents the 
amount of ebits needed. 

One final remark: this example gives EAOQECCs with positive net rate, so they 
could be used as catalytic codes. 

6.4.3 EAOQECCs from classical quaternary codes 

In the following, we will show how to use MAGMA [9] to construct EAOQECCs 
from classical quaternary codes with positive net yield and without too much distance 
degradation. Consider the following parity check matrix H4 of a [15, 10,4] quaternary 
code: 



•2 



1 1 1 Lo- 
10 1 u LO^ 



1 LO^ LO CJ^ 1 

1 a; 1 a; 1 

LO 1 U 1 Lo'^ LO 

1 1 a;2 1 a;^ a; 1 a;^ 

000000 010 



1 w 



1 



(60) 
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where {0, 1, w^} are elements of GF(4) that satisfy: 1 + a; + = and cu^ = 
1. This quaternary code has the largest minimum weight among all known [n = 
15, k = 10] linear quaternary codes. By the construction given in [13], this code gives 
a corresponding [[15, 9, 4; c = 4]] EAQECC with the stabilizers given in Table 8. 
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Table 8: Stabihzcr generators of the [[15, 9, 4; c = 4]] EAQECC derived from the 
classical code given by Eq. (60). The size of Se is equal to 2^"^. 

The entanglement subgroup Se of this EAQECC has c = 4 symplectic pairs. Our 
goal is to construct an EAOQECC from this EAQECC such that the power of error 
correction is largely retained, but the amount of entanglement needed is reduced. 
In this example, the choice of which symplectic pair is removed strongly affects the 
distance d of the resulting EAOQECC. By using MAGMA to perform a random search 
of all the possible sympletic pairs in ^S^;, and then putting them into the gauge subgroup 
Sqi we can obtain a [[15, 9, 3; c = 3, r = 1]] EAOQECC with stabiHzers given in Table 9. 
The distance is reduced by one, which still retains the ability to correct all one-qubit 
errors; the amount of entanglement needed is reduced by one ebit; and we gain some 
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extra power of passive error correction, due to the subsystem structure inside the code 
space, given by the gauge subgroup Sq- 
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Table 9: Stabihzer generators of the [[15,9,3;c = 3,r = 1]] EAOQECC derived from 
the EAQECC given by Table 8. The size of Se and Sq is equal to 2^" and 2^"" , 
respectively. 

6.5 Discussion 

We have shown a very general quantum error correction scheme that combines two 
extensions of standard stabilizer codes. This scheme includes the advantages of both 
entanglement-assisted and operator quantum error correction. 

In addition to presenting the formal theory of EAOQECCs, we have given several 
examples of code construction. The methods of constructing OQECCs from standard 
QECCs can be applied directly to the construction of EAOQECCs from EAQECCs. 
We can also construct EAOQECCs directly from classical linear codes. 

We also show that, by exploring the structure of the symplectic subgroup, we 
can construct versatile classes of EAOQECCs with varying powers of passive versus 
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active error correction. Starting with good classical codes, this entanglement-assisted 
operator formalism can be used to construct quantum codes tailored to the needs of 
particular applications. 
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Chapter 7: Quantum quasi-cyclic low-density 
parity- check codes 



7.1 Classical low-density parity-check codes 

Given a binary parity check matrix H, its density is defined to be the ratio of the 
number of "1" entries to the total number of entries in H. When the density is less 
than i, we call such code "low-density parity-check (LDPC) code". LDPC codes were 
first proposed by Gallager [27] in the early 1960s, and were rediscovered [45, 19, 43] 
in the 90s. It has been shown that these codes can achieve a remarkable performance 
that is very close to the Shannon limit. Sometimes, they perform even better [42] 
than their main competitors, the Turbo codes. These two families of codes are called 
modern codes. 

A LDPC code is regular, if its parity check matrix H has fixed weight for columns 
and rows; otherwise, it is irregular. A (J, L)-regular LDPC code is defined to be the 
null space of a Boolean parity check matrix H with the following properties: (1) each 
column consists of J "ones" (each column has weight J); (2) each row consists of L 
"ones" (each row has weight L); (3) both J and L are small compared to the length 
of the code n and the number of rows in H. 

We define a cycle in H to be of length 2s if there is an ordered list of 2s matrix 
elements such that: (1) all 2s elements of H are equal to 1; (2) successive elements 
in the list are obtained by alternately changing the row or column only (i.e., two 
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consecutive elements will have either the same row and different columns, or the same 
column and different rows); (3) the positions of all the 2s matrix elements are distinct, 
except the first and last ones. We call the cycle of the shortest length the girth of the 
code. 

Several methods of constructing good families of regular LDPC codes have been 
proposed [43, 36, 26]. However, probably the easiest method is based on circulant per- 
mutation matrices [26], which was inspired by Gallager's original LDPC construction. 
In the following, we will first review several relevant properties of binary circulant 
matrices, and then show the construction of this type of classical LDPC codes using 
circulant matrices. 

7.1.1 Properties of bineiry circulant matrices 

Let M be an r X r circulant matrix over F2. We can uniquely associate with M a 
polynomial M{X) with coefficients given by entries of the first row of M. If c = 
(co, ci, • • • , Cr-i) is the first row of the circulant matrix M, then 

M{X) = Co + CiX + C2X^ + ■■■ + Cr-lX'-K (61) 

Adding or multiplying two circulant matrices is equivalent to adding or multiplying 
their associated polynomials modulo X'^ — 1. We now give some useful properties of 
these matrices and polynomials. 

Proposition 13. The set of binary circulant matrices of size r x r forms a ring 
isomorphic to the ring of polynomials of degree less than r: ¥2[X\/ {X"^ — 1). 

Lemma 5. Let M[X) he the polynomial associated with the r x r binary circulant 
matrix M. If gcd{M{X), X'^ ~ 1) = K{X), and the degree of K(X) is k, then the rank 
of M is r — k. 
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Proof. Let L{X) = {X"^ — l)/i^(X), and let b G {I12Y be the coefficient vector asso- 
ciated with L{X). Since the degree of L{X) is r — k, bi = iov i > r — k. It follows 
that 

L{X)M{X) = mod (X^ - 1). (62) 
If Tj is the i-th. row of M, then (62) gives the following k linearly dependent equations: 



boTo + 6iri H h br-krr-k = 

6ori + 61 r2 H h 6r_fcr^_fe+i = 

boTk-l + biTk H 1- br-k^r-l = 0. 



(63) 



The set {r^_fe, • • • , r^_i} can therefore be expressed as linear combinations of {ro, • • • , r^-k-i}, 
and the rank of M is r — A;. □ 

Theorem 11. Let r = p ■ q, and let c = (cq, ci, • • • , Cr-i) be the first row of an r x r 
circulant matrix M. If Ci is 1 only when i = mod p, then rank{M) = p. 

Proof. Let M{X) = YljZo be the polynomial associated with M, with degree r—p. 
Since M(X)|(X^ - 1), the degree of K{X) = gcd(M(X), X'' - 1) = M{X) is also r-p. 
Therefore, by lemma 5, the rank of M is p. □ 

Theorem 12. Let r = p ■ q, and let c = (cq, ci, • • • , Cr-i) be the first row of an r x r 
circulant matrix M. If Ci is 1 only when i < p, then rank{M) = r — p + 1. 

Proof. In this case, M{X) = 1 + X + • • • XP'^ has degree p-1. Since M(X)|X^ - 1, 
again by lemma 5 the rank ofMisr— + □ 

Corollary 1. Let r = p ■ q, and let c = (cq, ci, • • • , c^-i) be the first row of an r x r 

circulant matrix M such that the weight of c is p. If M{X)\{X'^ — 1), then the rank k 
of M is lower-bounded by r — p + 1. 
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Proof. Since the weight of c is p, the lowest possible degree of M(X) is p — 1. Then 



7.1.2 Claissical quasi-cyclic LDPC codes 

Definition 2. A binary linear code C{H) of length n = r ■ L is called a quasi-cyclic 
( QC) code with period r if any codeword which is cyclically right-shifted by r positions is 
again a codeword. Such a code can be represented by a parity- check matrix H consisting 
of r X r blocks, each of which is an (in general different) r x r circulant matrix. 

By the isomorphism mentioned in Prop. 13, we can associate with each quasi-cyclic 
parity-check matrix H G ¥2^^^^ a J x L polynomial parity-check matrix H(X) = 
where hj^i{X) is the polynomial, as defined in Eq. (61), representing 
the r X r circulant submatrix of H, and the notation [J] := {1, 2, • • • , J}. 

Generally, there are two ways of constructing (J, L)-regular QC-LDPC by using 
circulant matrices [54]: 

Definition 3. We say that a QC-LDPC code is Type-I if it is given by a polyno- 
mial parity-check matrix H(X) with all monomials. We say that a QC-LDPC code is 
Type-II if it is given by a polynomial parity-check matrix H(X) with either binomials, 
monomials, or zero. 

7.1.2.1 Type-I QC-LDPC 

To give an example, let r = 16, J = 3, and L = 8. The following polynomial parity 
check matrix 



by the method of Theorem 12, the rank k, is at least r — p-\-l. 



□ 



X 



X 



X 



X 



X 



X 



X 



X 



H(X) 



X2 x^ x^ x^ x2 x^ x'^ x^ 



(64) 



x^ x^ x^ x^ x^ x^ 
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gives a Type-I (3, 8)-regular QC-LDPC code of length n = 16 • 8 = 128. Later on, we 
will also express H(X) by its exponent matrix He- For example, the exponent matrix 
of (64) is 



He 



11111111 

25352535 
23456789 



(65) 



The difference of arbitrary two rows of the exponent matrix He is defined as 



dij = Ci- Cj = {{ci^k - Cj,fc)mod r] 



ke[L] 



(66) 



where Cj is the i-th row of He and r is the size of the circulant matrix. We then have 



d2i = (1,4,2,4,1,4,2,4) 
dai = (1,2,3,4,5,6,7,8) 
d32 = (0,14,1,0,4,2,5,4). 



We call an integer sequence d = {do,di,--- ,dL-i) multiplicity even if each entry 
appears an even number of times. For example, d2i is multiplicity even, but d32 is 
not, since only and 4 appear an even number of times. We call d multiplicity free if 
no entry is repeated; for example, dsi. 

A simple necessary condition for Type-I (J, L)-rcgular QC-LDPC codes to give 
girth g > 6 is given in [26]. However, a stronger result (both sufficient and necessary 
condition) is shown in [30]. We state these theorems from [30] without proof. 

Theorem 13. A Type-I QC-LDPC code C{He) is dual- containing if and only ifCi — Cj 
is multiplicity even for all i and j, where Cj is the i-th row of the exponent matrix He- 

Theorem 14. A necessary and sufficient condition for a Type-I QC-LDPC code 
C{He) to have girth g > 6 is Ci — Cj to be multiplicity free for all i and j- 
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Theorem 15. There is no dual- containing Type-I QC-LDPC having girth g > 6. 
7.1.2.2 Type-II QC-LDPC 

Take r = 16, J = 3, and L = 4. The following is an example of a Type-II (3,4)-regular 
QC-LDPC code: 



H(X) 



X + X"^ X'^ + X^^ 
X'^ + X^ x'^ + x^^ 



(67) 



The exponent matrix of (67) is 





(1,4) 


oo 


(7,10) 


oo 


He = 


5 


6 


11 


12 




oo 


(2,9) 


oo 


(7,13) 



(68) 



Here we denote X°° = 0. 

The difference of two arbitrary rows of He is defined similarly to (66) with the 
following additional rules: (1) if for some entry ci^k is oo, then the difference of Ci^k 
and other arbitrary term is again oo; (2) if the entries Cj^fc and Cj^k are both binomial, 
then the difference of Cj^^ and cj^k contains four terms. In this example, we have 



d2i = ((4,l),oo,(4,l),oo) 

dsi = (00,00,00,00) 

d32 = (00, (12, 3), 00, (11,1)) 

dii = ((0,3, 13,0), 00, (0,3, 13,0), 00) 

d22 = (0,0,0,0) 

d33 = (00, (0,9, 7,0), 00, (0,10, 6, 0)) . 
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The definition of multiplicity even and multiplicity free is the same except that 
we do not take oo into account. For example, is multiplicity free, since there is no 
pair with the same entry except oo. Unlike Type-I QC-LDPC codes whose da is always 
the zero vector, da of Type-11 QC-LDPC codes can have non-zero entries. Therefore 
it is possible to have cycles of length 4 in a single layer if da is not multiplicity free. 
Each layer is said to be a set of rows of size r in the original parity check matrix H 
that corresponds to the row of He- For example, dn is multiplicity even, therefore 
the first layer of this Type-11 regular QC-LDPC parity check matrix contains 4-cycles. 

In the following, we will generalize theorems 13-14 given in the previous section to 
include the Type-II QC-LDPC case. 

Theorem 16. C{He) is a dual- containing Type-II regular QC-LDPC code if and only 
if Ci — Cj is multiplicity even for all i and j. 

Proof. Let H(X) = [/ij,z(-'^)]je[J],/e[-L] be the polynomial parity check matrix associated 
with a Type-II (J, L)-regular QC-LDPC parity check matrix H. Denote the transpose 
of H(X) by U{X)T = and we have 



if hj,i{X) = 

X*--^ if hj^i{X) = X'' ■ (69) 

Xr-ki + j^r-fc2 if hj^i{X) = X^^ + X^^ 



Let H(X) = H(X)H(X)^, and let the (z, j)-th component of H(X) be /ijj(X). Then 

h,j{X) = Y,Ki{X)hiAX). (70) 

The condition that Cj — Cj is multiplicity even implies that hij{X) = modulo X^ — 1, 
and vice versa. □ 
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Theorem 17. A necessary and sufficient condition for a Type-II regular QC-LDPC 
code C{He) to have girth g > 6 is that Ci — Cj be multiplicity free for all i and j. 

Proof. The condition that Cj — Cj is multiphcity free for ah i and j guarantees that 
there is no 4-cycle between layer i and layer j, and vice versa. □ 

Theorem 18. There is no dual- containing QC-LDPC having girth g > G. 

Proof. This proof follows directly from theorem 16 and theorem 17. If the Type- 
II regular QC-LDPC code is dual-containing, then by theorem 16, — Cj must be 
multiplicity even for all i and j. However, theorem 17 says that this QC-LDPC must 
contain cycles of length 4. □ 

7.1.3 Iterative decoding algorithm 

There are various methods for decoding classical LDPC codes [36]. Among them, 
sum-product algorithm (SPA) decoding [43] provides the best trade-off between error- 
correction performance and decoding complexity. Before leaving this section, we will 
review this SPA decoding procedure for classical LDPC codes. It turns out that the 
same SPA decoding algorithm can be used in the quantum case to decode the error 
syndromes effectively. 

Let s,r G (^2)"^ be the encoded signal and the received signal, respectively, such 
that 



{H,s) = 0^, 
r = s -I- n. 



(71) 
(72) 



where n G (^2)" is the noise vector introduced by the binary symmetric channel, 
and H is the parity check matrix. The decoder's task is to infer s based on the 
received signal r and the knowledge of the noise n. The optimal decoder, also known 
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as the maximally likelihood decoder, returns the encoded signal s that maximizes the 
posterior probability 

. ») . (73) 

It is known that this optimal decoding is an NP-complete problem [7]. 

If we assume that the prior probability of s is uniform, and the noise n is indepen- 
dent of s, then it follows that estimating the encoded signal s is the same as estimating 
the noise n. This is because once n is known, then the encoded signal is 



s = r + n. 



We can further reduce the decoding problem to the task of finding the most probable 
noise vector n based on the error syndrome vector z since 

z'^ = {H,n) = {H,r). (74) 



Next, we will formally introduce the sum-product algorithm, also known as a "belief 
propagation algorithm" [49]. Assume the parity check matrix H is of size mx n. The 
decoding problem is to find a noise vector n (given that n is independent of s) satisfying 

The elements {rij}, i = 1,2, •• • ,n, arc referred as bits, while the elements {zj}, j = 
1, 2, • • • ,m, are referred as checks. Together {rii} and {zj} form a belief network, and 
the network of checks and bits are a bipartite graph: bits only connect to checks and 
vice versa. 

The algorithm presented below follows closely from [43]. The goal is to compute 
the marginal posterior probability P{ni\z,H) for each i. Denote the set of bits that 
participate in check j by 5t(j) = {i : Hji = 1}. Denote the set of checks in which bit i 
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participates by 9Jt(i) = {j : Hji = 1}. Denote a set with bit i excluded by 
Define the quantity to be the probability that bit i of n has the value x G {0, 1}, 
given the probability obtained via checks other than check j, {rj,^ : j' G ^St{i)\j}. 
Define the quantity rj- to be the probability of check j being satisfied if bit i of n is 
considered fixed at the value x and the other bits have a separable distribution given 
by the probabilities {qji' : i' G These two quantities qij and rij associated 

with each nonzero element of H are iteratively updated, and would produce the exact 
marginal posterior probabilities of all the bits after a fixed number of iterations if 
the bipartite graph defined by the matrix H contained no cycle [49]. When cycles 
exist, the algorithm produces inaccurate probabilities. However, the correct marginal 
probabilities are not necessary as long as the decoding is correct. 

Initialization. Denote the prior probability that bit = by p'f, and pj = I — Pi- 
Set pj = f, where / is the crossover probability of binary symmetric channel. The 
variables and gjj are initialized to the value p^ and pj when Hji = 1. 

Horizontal step. The procedure in the horizontal step of the algorithm is to run 
through the checks j and compute for each i G n(j) two probabilities and rj^, where 



E 

n^i -.i' e'CX(j)\i 



nii:i'&'Cl{j)\i 



p {z.lm = 0, {m^ : i' G n(i)\i}) [] <^i; 

i'e'a{j)\i 

P {zjlm = 1, {m, : i' G H q^i; 

i'eVL{j)\i 



(75) 
(76) 



The quantity r^j is the probability of the observed value of Zj when rn is assumed to be 
0, given that the other bits {n^' : i' G n(j)\i} have a separable distribution given by 
the probabilities {o'jj/, The quantity rjj is defined similarly except rii is assumed 
to be 1. 
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Vertical step. The procedure in tlic vertical step of the algorithm is to take the 
computed values of r^j and rjj and update the values of the probabilities and gjj 
for each j . 

1% = ^3^P^ n 4f (77) 

q]i = ajipj Yl r],i, (78) 
j>em{i)\3 

where aji is chosen such that + gjj = 1. 

DecodingThe pseudoposterior probabilities qf and qj are calculated after each 
iteration of the horizontal and vertical steps, where 

g° = n 4' (79) 

qI = ocip] n r],. (80) 

These quantities are used to create a tentative decoding n. If q} > 0.5, hi is set to 1. If 
n satisfies {H, n) = z^, the decoding algorithm stops. Otherwise, the algorithm repeats 
from the horizontal step. If the number of iterations reaches some preset maximum 
number without successful decoding, we declare a failure. 

It has been shown that the performance of iterative decoding very much depends 
on the cycles of shortest length [57] — in particular, cycles of length 4. These shortest 
cycles make successive decoding iterations highly correlated, and severely limit the 
decoding performance. Therefore, to use SPA decoding, it is important to design 
codes without short cycles, especially cycles of length 4. 

The sum-product decoding algorithm can be directly applied to the quantum codes 
constructed using the (generalized) CSS construction. This is because the Z errors and 
X errors of a CSS-type quantum code can be decoded separately. Therefore, decoding 
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the quantum errors is equivalent to using the SPA separately for each classical code 
in the CSS construction (though this would throw away some information about the 
correlations between X errors and Y errors). 

7.2 Quantum low-density parity-check codes 

The quantum versions of low-density parity-check codes [30, 44, 17, 20] are far less 
studied than their classical counterparts. The main obstacle comes from the dual- 
containing constraint of the classical codes that are used to construct the correspond- 
ing quantum codes. While this constraint was not too difficult to satisfy for relatively 
small codes, it is a substantial barrier to the use of highly efficient LDPC codes. How- 
ever, with the entanglement-assisted formalism, such constrains can be removed, and 
constructing quantum LDPC codes from classical LDPC codes becomes transparent. 

The second obstacle to constructing quantum LDPC codes comes from the bad 
performance of the efficient decoding algorithm. Though the SPA can be directly used 
to decode the quantum errors, the performance of SPA decoding was severely limited 
by the many 4-cycles in the standard quantum LDPC codes. We show in this section 
that using the entanglement-assisted formalism, we can completely eliminate all the 
4-cycles in the quantum LDPC codes. We will focus on the quantum LDPC codes con- 
structed from classical quasi-cyclic LDPC codes, and demonstrate their performance 
using numerical methods. 

7.2.1 Quantum quasi-cyclic LDPC codes 

It has been shown that any classical linear code can be used to construct a correspond- 
ing entanglement-assisted quantum error-correcting code. 

In the following, we will consider conditions that will give us (J, L)-regular QC- 
LDPC codes C{H) with girth ^ > 6 and with the rank of HH^ as small as possible. In 
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general, H(X) represents a square Hermitian matrix H with size Jr x Jr that contains 
circulant r x r matrices represented by hij{X) as defined in (70). Next, we provide 

two examples to illustrate two different ways of minimizing the rank of the square 

Hermitian matrix represented by H(X). 

The first method is to make the matrix H = HH^ become a circulant matrix with 

a small rank. This can be achieved by choosing H(X) such that 

hi,j{X) = /tj+ij+i(X), 

for i,j = 0, 1, • • • , J — 2. The rank k oi H can then be read off by lemma 5. If 
gcd(H(X),X"^'' - 1) = K{X), and the degree of K{X) = k, then k = Jr - k. Let's 
look at an example of this type using a classical Type-I QC-LDPC code. Take r = 16, 
J = 3, and L = 8. The following polynomial parity check matrix H(X) gives the 
corresponding quantum QC-LDPC code with length 128: 



H{X) 



X X X X X X X X 
X X"^ X^ X'^ x^ x^ x'^ x^ 
X x^ x^ x'^ x^ x^^ x^^ x^^ 



(81) 



Then 



0, i = j, 

El=oX\ i = j + l 



(82) 



It can be easily verified that H(X) represents a circulant matrix, and the polynomial 
associated with H is 



H(X) =Xi6 (y.X") (y.^'') 

\k=0 / \k=0 / 
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The degree of gcd(H(X),X^^ — 1) = 30, therefore by lemma 5, the number of ebits 
that were needed to construct the corresponding quantum code is only 18. Actually, 
(81) gives us a [[128,48,6; 18]] EAQECC, and we will refer to this example as "exl" 
later in section 7.3. 

The second method is to minimize the rank of each circulant matrix inside H. Let 
the rank of the circulant matrix represented by hij{X) be Kij. Let the rank of H be 
K. Then 

J 

K <y max Ki j . (83) 

This upper bound is not tight for Type-I ( J, L)-regular QC-LDPC codes when L is 
odd. This is because Ki^i = r for every i. When L is even, we have Ki^i = for every 
i. We can obtain a tighter upper bound for n by carefully choosing the exponents of 
H(X) such that the degree of gcd(/iij(X), — 1) is as large as possible for every i 
and j. 

Theorem 19. Given a Type-I {J, L)-regular QC-LDPC code with fl{X), if L is even 
and gcd{hij{X), X"^ — 1) > 1 fori / j, then the rank n is upper bounded by J{r — L-\-l). 

Proof. Let hij be the circulant matrix associated with the polynomial hij{X), then 
the weight of the coefficient vector of hij is L. By Corollary 1, Kij < r — L + 1. 
Therefore 

J 

K < > maxAtj i < Jir — L + 1). 

□ 
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Our second example comes from a classical Type-II QC-LDPC code. Again take 
r = 16, J = 3, and L = 8. The following polynomial parity check matrix H(X) gives 
the corresponding quantum QC-LDPC code with length 128: 



H(X) 



x^ 





Then 





X^ 



x^ 





0, 



X + X^ 

x^ 

X + X"^ x + x^ 
(i,j) = (2,2),(l,3),or(3,l) 



X + X^ 




Y.l=^X^+^\ (z,j) = (l,l),(3,3) 
ELo^'> (i,j) = (2,l),(2,3) 





X8 

(84) 



(85) 



In this example, each layer of the matrix H(X) has rank less than 9. Actually, (84) 
gives a [[128, 48, 6; 18]] quantum QC-LDPC code, and we will refer to this example as 
"ex2" in section 7.3. 



7.3 Performance 

In this section, we compare the performance of the QLDPC codes given in Sec. 7.2 to 
conventional (dual-containing) QLDPC codes that have been derived in the existing 
literature. The easiest way of constructing a QLDPC is the following technique, pro- 
posed by MacKay et al. in [44]. Take anri/2xn/2 cyclic matrix C with row weight 
L/2, and define 

iJo = [C,C^]. 

Then we delete some rows from Hq to obtain a matrix H with m rows. It is easy to 
verify that H is dual-containing. Therefore by the CSS construction, wc can obtain 
conventional QLDPC codes of length n. The advantage of this construction is that 
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the choice of n, m,, and L is completely flexible; however, the column weight J is not 
fixed. We picked n = 128, m = 48, and L = 8, and called this quantum LDPC code 
"ex-MacKay." 

The second example of constructing a conventional QLDPC is described in the 
following theorem [30]: 

Theorem 20. Let P be an integer which is greater than 2 and a an element ofZ*p := 
{z : z~^exists} with ord{a) / \^p\, where ord{a) := min{m > 0\a"^ = 1} and \X\ 
means the cardinality of a set X. If we pick any t G Zp = {l,a,a^,- ■ ■}, define 



dk,l '■= 



a 



-3+1 



0<l<L/2 



^^-k-i+i < / < L/2 
-0-'=+' L/2 < / < L 



and define the exponent matrix Hq and Hd as 



He = [Cj,l]jGlJ],l£lLh = [dk,l\k&[K],l&[L], 



where L/2 = ord{a) and 1 < J, K < L/2, then He and Hd can be used to construct 
quantum QC-LDPC codes with girth at least 6. 
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Here, we pick the set of parameters (J, L, P, a, r) to be (3, 8, 15, 2, 3). The exponent 
matrices Hq and described in theorem 20 are 



c 



Hd 



1 2 4 8 6 12 9 3 

8 1 2 4 12 9 3 6 
4 8 1 2 9 3 6 12 

9 3 6 12 14 13 11 7 
12 9 3 6 13 11 7 14 
6 12 9 3 11 7 14 13 



(86) 



(87) 



and by the CSS construction, it wih give a [[120,38,4]] quantum QC-LDPC code. We 
will call this code "ex-HI" . 



Performace of Quantun LDPC Codes 
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Figure 10: Performance of QLDPC with SPA decoding, and 100-iteration 
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We compare the performance of our examples in section 7.2.1 with these two dual- 
containing quantum LDPC codes in figure 10. In the simulation, we assume the depo- 
larizing channel and use of sum-product decoding algorithm. The performances of exl 
and ex2 do not differ much. This is not surprising, since these two codes have similar 
parameters. The reason that the performance of ex-MacKay is worse than our two 
examples is because there are so many 4-cycles in ex-MacKay. These cycles impair the 
decoding performance of sum-product algorithm. Our entanglement-assisted quantum 
QC-LDPC codes also outperform the quantum QC-LDPC code of ex-HI, since the clas- 
sical QC-LDPC codes used to construct our examples have better distance properties 
than the classical QC-LDPC of ex-HI. This simulation result is also consistent with 
our result in [13]: better classical codes give better quantum codes. Even though the 
parameters are not exactly the same, our codes have higher rate than the code rate of 
ex-HI. 

It is not difficult to verify that the girth of exl is 6, and the girth of ex2 is 8. We 
numerically investigated the performance of these two examples with various numbers 
of iterations. According to our simulation results, the performance of exl and ex2 is 
almost the same. The result agrees with the classical result in [26] showing that the 
increase of girth from 6 to 8 is not of great help. The result is quite interesting since 
it implies that we do not need to worry about constructing QLDPC with higher girth. 

7.4 Conclusions 

There are two advantages of Type-II QC-LDPCs over Type-I QC-LDPCs. First, ac- 
cording to [54] certain configurations of Type-II QC-LDPC codes have larger minimum 
distance than Type-I QC-LDPC. Therefore, we can construct better quantum QC- 
LDPCs from classical Type-II QC-LDPC codes. Second, it seems likely that Type-II 
QC-LDPCs will have more flexibility in constructing quantum QC-LDPC codes with 
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small amount of pre-sharcd entanglement, because of the ability to insert zero subma- 
trices. However, further investigation of this issue is required. 

By using the entanglement-assisted error correction formalism, it is possible to 
construct EAQECCs from any classical linear code. We have shown how to do this for 
two classes of quasi-cyclic LDPC codes (Type-I and Type-II), and proven a number 
of theorems that make it possible to bound how much entanglement is required to 
send a code block for codes of these types. Using these results, we have been able to 
easily construct examples of quantum QC-LDPC codes that require only a relatively 
small amount of initial shared entanglement, and that perform better than previously 
constructed dual-containing QLDPCs. Since in general the performance of quantum 
codes follows directly from the performance of the classical codes used to construct 
them, and the evidence of our examples suggests that the iterative decoders can also 
be made to work effectively on the quantum versions of these codes, this should make 
possible the construction of large-scale efficient quantum codes. 
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